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Abstract not available for JP 2002514333 (T) 

Abstract of corresponding document: WO 9901815 (A1) 

The present invention provides obfuscation techniques for enhancing software security. In one 
embodiment, a method for obfuscation techniques for enhancing software security includes selecting a 
subset of code (e.g., compiled source code of an application) to obfuscate, and obfuscating the selected 
subset of the code. The obfuscating includes applying an obfuscating transformation to the selected subset 
of the code. The transformed code can be weakly equivalent to the untransformed code. The applied 
transformation can be selected based on a desired level of security (e.g., resistance to reverse 
engineering). The applied transformation can include a control transformation that can be creating using 
opaque constructs, which can be constructed using aliasing and concurrency techniques. Accordingly, the 
code can be obfuscated for enhanced software security based on a desired level of obfuscation (e.g., 
based on a desired potency, resilience, and cost). 
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* NOTICES * 



JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 

[Claim(s)] 

1 . it is a method for confusion-izing a code which a computer carries out — stage; which chooses 
a subset of a code which should be carried out [ **** ]-izing 

A stage which chooses confusion-ized conversion which should be applied; it reaches. A stage 
which applies conversion; 

How to change by ****** and to provide weak equivalence [ as opposed to an unconverted 
code, in a changed code ]. 

2. Stage of identifying the singular number or two or more source code input files corresponding 
to source code for code of application which should be processed; 

A stage which chooses a confusion-ized level (effect) needed; 

A stage which chooses the maximum execution time or a space penalty (cost); 

A stage which reads and analyzes the syntax of an input file; 

A stage of providing information which identifies a data type, a data structure, and control 
structure which are used by application which should be processed; 

A stage which chooses and applies confusion-ized conversion to a source-code object until effect 
needed is chosen or it exceeds the maximum cost; it reaches. A stage which outputs a changed 
code of application; 

A method which is included in a pan and which is enforced by computer according to claim 1 . 

3. Method according to claim 1 by which ambiguous construct is contained in conversion and 
this ambiguous construct is built using aliasing and concurrency technology. 

4. Method according to claim 1 of including further stage which outputs information about code 
by which changed application to information about confusion-ized conversion applied to 
confusion-ized code and source code of the application was confusion-ized. 

5. Method according to claim 1 chosen so that conversion may save observability action of code 
of one application. 

6. A code, including a confusion— ization-canceled stage further for confusion-ized release of a 
code.A method according to claim 1 by which a stage of removing all confusion-ization from a 
code by which one application was confusion-ized by using a slicing, partial evaluation, data 



flow analysis, or statistical analyses is included. 

7. — it is the computer program materialized on a medium in which computer reading for 
confusion-izing a code is possible — logic; which chooses a subset of a code which should be 
carried out [ **** ]-izing 

Logic which chooses confusion-ized conversion which should be applied; it reaches. Logic 
which applies conversion; 

A computer program which an implication and a changed code provide with weak equivalence 
over an unconverted code. 

8. Logic which identifies the singular number or two or more source code input files 
corresponding to source code for code of application which should be processed; 
Logic which chooses a confusion-ized level (effect) needed; 

Logic which chooses the maximum execution time or a space penalty (cost); 
Logic which reads and analyzes the syntax of an input file; 

Logic which provides information which identifies a data type, a data structure, and control 
structure which are used by application which should be processed; 

Logic which chooses and applies confusion-ized conversion to a source-code object until effect 
needed is attained or it exceeds the maximum cost; it reaches. Logic which outputs a changed 
code of application; 

The computer program according to claim 7 included in a pan. 

9. Computer program according to claim 7 by which ambiguous construct is contained in 
conversion and this ambiguous construct is built using aliasing and concurrency technology. 

10. The computer program according to claim 7 which includes further logic which outputs 
information about a code by which changed ABURIKESHON to information about confusion- 
ized conversion applied to a confusion-ized code and a source code of the application was 
confusion-ized. 

1 1 . The computer program according to claim 7 chosen so that conversion may save an 
observability action of a code of one application. 

12. A code, including confusion— ization-canceled logic further for confusion-ized release of a 
code. The computer program according to claim 7 in which a stage of removing all confusion- 
ization from a code by which one application was confusion-ized by using a slicing, partial 
evaluation, data flow analysis, or statistical analyses is included. 

13. — it is equipment for confusion-izing a code — means [ for choosing a subset of a code which 
should be carried out / **** /-izing ]; 

A means for choosing confusion-ized conversion which should be applied; it reaches. A means 
for applying conversion; 

Equipment with which an implication and a changed code provide weak equivalence over an 
unconverted code. 



14. A means for identifying the singular number or two or more source code input files 
corresponding to a source code for a code of application which should be processed; 

A means for choosing a confusion-ized level (effect) needed; 

A means for choosing the maximum execution time or a space penalty (cost); 

A means for reading and analyzing the syntax of an input file; 

A means for providing information which identifies a data type, a data structure, and control 
structure which are used by application which should be processed; 

A means for choosing and applying confusion-ized conversion to a source-code object until 
effect needed is attained or it exceeds the maximum cost; 
A means for outputting a changed code of application; 
The equipment according to claim 13 included in a pan. 

15. The equipment according to claim 13 with which an ambiguous construct is contained in 
conversion and this ambiguous construct is built using aliasing and concurrency technology. 

16. The equipment according to claim 13 which contains further a means for outputting 
information about a code by which changed application to information about confusion-ized 
conversion applied to a confusion-ized code and a source code of the application was confusion- 
ized. 

17. The equipment according to claim 13 chosen so that conversion may save an observability 
action of a code of one application. 

18. A code, including a means for confusion—ization-canceling further for confusion-ized release 
of a code. The equipment according to claim 13 with which a stage of removing all confusion- 
ization from a code by which one application was confusion-ized by using a slicing, partial 
evaluation, data flow analysis, or statistical analyses is included. 

19. The equipment according to claim 13 with which a code contains a Java byte code. 

20. The equipment according to claim 13 with which conversion provides formation of data 
confusion, formation of control confusion, or prevention confusion-ization. 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 

Field of confusion-ized technical invention for reinforcing software security This invention 
relates the interpretation of software, decoding, or reverse engineering to the method and 
equipment prevention or for blocking at least. Although not being exclusive, speaking more 
specifically, this invention, It is related with the method and equipment for increasing the 
structural and logical complexity of software by inserting, removing or rearranging an 
identifiable structure or information in the form where decompile or a reverse engineering 
process becomes still more difficult, from software. 

The background of invention Software is analyzed by the 3rd person of the character top, and is 
easy to be copied. In order to reinforce software security until now, great efforts were paid, and 
these success was various. The problem of such security is related with a desire to hide the 
programming technique which can be determined via the necessity of preventing the 
unauthorized copy of software, and reverse engineering. 

For example, the established legal method like copyright provides the protection measure on 
legislation. However, expense and the time of both the things for which the legal right made 
under such a system is asserted may be these work. The protection given to software under 
copyright does not cover programming technique. This technology (namely, function contrary to 
the form of software) is difficult to act as law Mamoru Ueyasu.the software with which a reverse 
engineer is related from the beginning based on knowledge with a detailed function of the 
software in question — ****** .. infringement can be escaped by things. This knowledge can be 
drawn from analyzing a data structure, abstraction, and the organization of a code. 
A software patent provides more extensive protection. However, it is clearly advantageous to 
combine the legal protection of computer software with technical protection. 

The conventional approach against protection of the software in which an ownership opinion is 
possible was either of the things based on [ using the solution on the hardware based on 
encryption ] simple rearrangement of source code structure. The technology based on hardware 
does not have ideal it at the point that it is what generally starts as for expense and is connected 
to a specific plat form or the Hardware add-on. The solution by software carries out entailment 
of a trivial code confusion-ized machine called the Crema confusion-ized machine for Java™ 
standardly. Some confusion-ized machines usually remove source code formatting and a 
comment for the purpose of the lexical structure of application, and rename a variable. However, 
such confusion-ized technology does not provide sufficient protection to malicious reverse 
engineering. That is, reverse engineering is a problem unrelated to the form where software is 
distributed. When software is distributed in the hardware dependence nature format which there 
is much information in an original source code, or holds all, a problem gets worse further. As an 
example of this format, there is a Java™ byte code and architecture neutral distribution format 
(ANDF). 

The programmer may supply great time, efforts, and skill to software development. It is very 
important that a competitor can be commercially prevented from copying the technology in 



which an ownership opinion is possible. 

Indication of invention This invention like the method enforced by computer for heightening the 
resistance force of the software over reverse engineering (or since a useful choice is provided to 
the general public), The method and equipment for the confusion-ized technology for software 
security are provided. To the method enforced by computer in one embodiment in order to 
confusion-ize a code. Entailment of the stage which returns to the stage tested about the 
completion of supply of confusion-ized conversion to one piece or the code beyond it, the stage 
which chooses the subset of the code which should be carried out [ **** ]-izing, the stage which 
chooses the confusion-ized conversion which should be applied, the stage which applies 
conversion, and a completion testing phase is carried out. 

In one modification embodiment, this invention is performed on a computer, In the way the 
software which is memorized or is operated by that cause controls a computer by the form where 
the reverse engineering tolerance of the grade which was defined beforehand and controlled is 
shown, It is a stage which applies the confusion-ized conversion chosen as the portion as which 
software was chosen, The reverse engineering tolerance of the grade needed, It is related with the 
method of carrying out entailment of the stage which updates software in order to reflect stage; 
which attains confusion-ization of a fixed level using confusion-izing chosen so that the validity 
in the operation of software and the changed size of software might be provided, and confusion- 
ized conversion. 

In the method enforced by computer for this invention to reinforce the security of software in a 
desirable embodiment, For the application which should be processed. The stage which chooses 
the stage; maximum execution time or the space penalty (for example, cost) which chooses the 
confusion-ized level (for example, effect) stage; needed [ of identifying one piece or the source 
code input file beyond it corresponding to source software ]; Arbitrarily by a source code. The 
stage which reads and analyzes the syntax of an input file with the arbitrary libraries or 
additional files which were read directly or indirectly; The data type used by the application 
which should be processed, The stage of building a suitable table in order to provide the 
information which identifies a data structure and control structure and to memorize this 
information, The stage of pretreating the information about application in response to a 
preprocessing stage, The stage which chooses and applies confusion-ized code conversion to a 
source-code object; a method including the stage which repeats a confusion-ized code conversion 
stage, and the stage which outputs changed software is provided until the effect needed is 
attained or it exceeds the maximum cost. 

Preferably, the information about application is acquired using various static analytical skills and 
dynamic analytical skills. As static analytical skills, the data flow analysis between procedures 
and data subordinacy analysis are included. As dynamic analytical skills, profiling is contained 
and information can be arbitrarily acquired via a user. Profiling can be used for determining the 
confusion-ized level which can be applied to a specific source-code object. The conversion can 
include the control conversion created using two or more ambiguous constructs (syntax). This 
ambiguous construct is which a mathematical object cheap, although seen and performed from 
the standpoint of performance and expensive although a confusion-ized machine can build easily 
and a confusion release machine moreover fractures it. Preferably, an ambiguous construct is 



built using aliasing and concurrency technology, and it deals in it. The information about source 
application can be acquired using the pragmatic (practical use) analysis which determines 
similarly the character of the idiom for a program which the application contains, and a language 
construct. 

The effect of confusion-ized conversion can be evaluated using software complexity metric. 
Confusion-ized code conversion is applicable to all language constructs, a module, a class, or a 
subroutine can be divided or annexed — ; — new control and data structure can also be created — ; 
— original control and a data structure are also correctable again. The new construct preferably 
added to the changed application is chosen so that it may become what was similar in whether it 
is made to the thing in source application based on the pragmatic information collected between 
pretreatments. This method can generate a supplementary file including the information about 
the code by which changed application to the information and source software with which 
confusion-ized conversion was applied to it was confusion-ized. 

Preferably, when P is unconverted software and P' is changed software, confusion-ized 
conversion is a form where P and P' has the same observability action, and it is chosen so that the 
observability action of software may be maintained. When being unable to end P or ending with 
error condition, speaking more specifically, even if P' ends, it is not necessary to carry out it 
otherwise, and P' ends and generates the same output as P. Although the effect which a user 
experiences is included as an observability action, P and P' can run with a different detailed 
action which cannot be observed for a user. For example, as a detailed action of P which it 
differs and is obtained, and P', file creation, memory use, and network communication are 
included. 

In one embodiment, a slicing, partial evaluation, data flow analysis, or statistical analyses are 
similarly used by this invention. 

Therefore, the tool for confusion release adopted in order to remove confusion-ization from 
confusion-ized finishing application is provided. 

Brief explanation of the drawings Below, with reference to Drawings, this invention is explained 
as a mere example. 

Drawing 1 shows the data processing system according to instruction of this invention. 

nn^vlllg..2.illustrates the classification of the protection of software containing the category of 
confusion-ized conversion. 

Drawing 3 a and 3b show the technology for providing software security by the (a) server side 
execution and the (b) partial server side execution. 

Drawing 4 a and 4b show the technology for providing software security by using the native 
code by which (a) encryption and (b) signature were carried out. 

Drawing_5_shows the technology for providing software security through confusion-izing. 



D|]iv«i^j3_illustrates the architecture of an example of a confusion-ized tool suitable for using it 
with Java™ application. 

&rawjngjlis the table which tabulated the known software complexity metric selection. 

Drawing 8 a and 8b have illustrated the elasticity of confusion-ized conversion. 

Drawing 9 shows the ambiguous predicate of a different type. 

drawmgJJla and 10b — (a) — a trivial ambiguous construct — and (b) 
The example of a weak ambiguous construct is provided. 

BrawangJU^shows an example of calculation conversion (branch insertion conversion), 
a- 12 d of drawing 12 has illustrated loop condition insertion conversion. 
DrawjngJJ__illustrates the conversion which changes a reducible flow graph into an irreducible 
flow graph. 

Drawing 14 shows that a code Type can be parallelized, when it does not include data 
subordinacy at all. 

It is shown that drawing 13 can divide the code Type which does not include data subordinacy at 
all to a parallel thread by inserting a suitable synchronization unmodified instruction. 

Drawing J 6.shows how Procedures P and Q are made in-line at the call site, and then are 
removed from a code. 

Drawing 1 7 has illustrated the in-line processing method call. 

DrawingJ_8_shows the technology for carrying out interleave of the two methods declared within 
the same class. 

Dewing. 19 shows the technology for creating a different version of the plurality of one method 
by applying a different confusion-ized conversion set to an original code. 

Drawing 20 a - 20c provide the example of the roll conversion including (a) loop blocking, (b) 
loop unrolling, and (c) loop division. 

Drawing 21 shows the example of variable division. 

Drawing 22 p rovides one function built so that a string "AAA", "BAAAA", and "CCB" might be 
confusion-ized. 

Drawing 23 shows the example by which the two 32 bit variables x and y are annexed to one 64 
bit-variable z. 



Drawm^J24_shows the example of the data conversion for array reconstruction. 



Drawing 25 illustrates correction of inheritance hierarchy. 

Qra^nnj^26_illustrates the ambiguous predicate built from the object and the alias. 

Drawmg_22Lprovides an example of the ambiguous construct which used the thread. 

Drawing 28 a - drawing 28 d show the original program with which (a) contains three sentence 
S1-3 under confusion- izing, The confusion release machine with which (b) identifies a 
"constancy" ambiguous predicate is shown, and the confusion release machine with which (c) 
determines the common code in a sentence is shown, It is a figure showing the confusion release 
machine with which (d) applies some final simplification and returns a program to the original 
form which illustrates the relation of confusion-ized opposite confusion release. 

Drawin g 29 shows the architecture of a Java™ confusion release tool. 

Drawing 30 shows the example of statistical analyses used for evaluation. 

Dj^vjngJJ^a and 3 lb provide the table of the outline of various confusion-ized conversion. 

Drawing 32 provides the outline of various ambiguous constructs. 

Detailed description of the invention The following description is provided in relation to the 
Java™ confusion-ized tool which an applicant is developing now. However, if it is a person 
skilled in the art, the technology concerned of the ability to apply also to other programming 
languages is clear, and it should not be considered that this invention is what is restricted to 
Java™ application. It considers that the enforcement relevant to the programming language of 
others of this invention enters in a person's skilled in the art view. The following embodiments 
expect precision and aim specific at the Java 7 confusion-ized tool. 

The following names will be used in the following description, that is, P is the input application 
which should be confusion-ized ;P; whose 'is changed application — T is conversion in the form 
where it changes P into P'. P(T) P' is confusion-ized conversion in case P and P' has the same 
observability action. Generally an observability action is defined as an action which a user 
experiences. In this way, P' may have creation, then the unexpected effect which was said for the 
file which P does not have, unless a user experiences it. P and P' does not necessarily need to 
have equivalent efficiency. 

Example drawing 1 of hardware illustrates the data processing system according to instruction of 
this invention. Drawing 1 shows the computer 100 including three main elements. Entailment of 
the input-and-output (I/O) circuit 120 used for communicating information with the form 
appropriately structurized from the portion of others of this computer and this portion is carried 
out to the computer 100. Entailment of the control processing unit (CPU) 130 in the I/O circuit 
120 and the memory 140 (for example, volatility and nonvolatile memory), and a communicating 
state is carried out to the computer 100. These elements are standardly looked at by most general 



purpose computers. 



It actually has intention of the computer 100 so that it may become a thing representing the data 
processing device of an extensive category. 

The raster display monitor 160 was shown by the I/O circuit 120 and the communicating state, 
and it has ordered displaying the pixel which CPU 130 generates. Various cathode-ray tubes 
(CRT) of arbitrary well-known or the display device of other types can be used as the display 
device 160. The conventional keyboard 150 is also shown by 1/0120 and the communicating 
state. If it is a person skilled in the art, the computers 100 being some larger systems and 
obtaining will be understood. For example, the computer 100 may be in one network (for 
example, thing connected to the Local Area Network (LAN)), and communicating state. 

So that the computer 100 can carry out entailment of the confusion-ized circuit for reinforcing 
software security according to instruction of this invention, or it may understand especially, if it 
is a person skilled in the art again, It is also possible to carry out this invention in the form of the 
software performed by computer 100 (the metaphor can store this software in the memory 140, 
and can be performed on CPU130). For example, it is possible to make it confusion-ize with the 
confusion-ized machine performed on CPU130 in order to provide confusion-ized finishing 
program P' memorized in the memory 140 according to one embodiment of this invention in the 
un-getting[ confused ]-ized program P (for example, application) stored in the memory 140. 

The schematic diagram 6 of a detailed description shows the architecture of a Java™ confusion- 
ized machine. When the method of this invention is followed, a Java™ application class file, c. 
succession tree by which a bus is carried out with arbitrary library files is built with a symbol 
table, and the type information about all the symbols and the control flow graph about all the 
methods are provided. Arbitrarily, the user can provide a profiling data file so that it may be 
generated by the Java profiling tool. This information can be used for guiding a confusion-ized 
machine so that it may guarantee not being confusion-ized by the conversion whose portion of 
the applications performed frequently is very expensive. The information about application is 
collected using the standard compiler technology like the data flow analysis between procedures, 
and data subordinacy analysis. Some they is provided by specialist skills, if there are some which 
are provided by the user. This information is used in order to choose and apply suitable code 
conversion. 

Suitable conversion is chosen. The dominant standard used when choosing a great portion of 
suitable conversion is carrying out entailment of the necessary condition that the selected 
conversion is mixed with the remaining portion and nature of a code. This can cope with it by 
encouraging conversion with a high felicity value. Another necessary condition should 
encourage the conversion which produces confusion-ization of a high level by a low execution 
time penalty. The latter point is attained by choosing the conversion which makes effect and 
elasticity the maximum and makes cost the minimum. 

The priority of confusion-izing is assigned to a source-code object. It will be reflected how it is 
important for this to confusion-ize the contents of the source-code object. For example, 
confusion-ized priority becomes high when a specific source-code object includes dramatically a 



sensitive high material which can carry out an ownership opinion. About each method, an 
execution time rank is determined, and this is equal to 1, when spending much time in 
performing the method rather than which [ other ]. 

At this time, application is confusion-ized by establishing the mapping and confusion-ized 
priority and the execution time rank from a suitable in-house-data structure and each source-code 
object to suitable conversion. Confusion-ized conversion is applied until confusion-ization 
needed is attained or it exceeds the maximum execution time penalty. Changed application is 
written in at this time. 

The output of a confusion-ized tool is new application equivalent to an original copy 
functionally. This tool can also generate the Java™ source file to which the information on how 
the information to which conversion was applied about it, and the confusion-ized code are 
connected with original application was attached as notes. 

Here, it pulls and some examples of confusion-ized conversion are described in relation to a 
continuation Java™ confusion-ized machine. 

Confusion-ized conversion can be evaluated and classified according to the quality. The quality 
of conversion can be expressed according to the effect, elasticity, and cost. It is related to how 
the effect of conversion has ambiguous P' in a relation with P. Such metric one of all will 
become comparatively uncertain from being inevitably influenced by human being's recognition 
capability. For the purpose concerned, it is enough just to take the effect of conversion into 
consideration as one measure of the usefulness of the conversion. The elasticity of conversion 
measures how conversion lasts well to the attack from an automatic confusion release machine. 

This is the combination of two factors called a programmer's efforts and efforts of a confusion 
release machine. Elasticity is trivial or can be measured on the graduation of until one-way. One- 
way conversion is going too far at the point that it cannot be reversed. The 3rd component is 
conversion execution cost. This is the execution time or the space penalty worn as a result of 
having used changed application P'. The further details of conversion evaluation are stated in the 
portion of detailed explanation of following desirable embodiments. The main classifications of 
confusion-ized conversion are shown in drawing 2 C, and are given for details to e-2 g of 
drawing 2. 

Categorization of the : confusion-ized conversion whose example of confusion-ized conversion is 
as follows is carried out to the formation of control confusion, the formation of data confusion, 
the formation of layout confusion, and prevention confusion-ization, and it deals in it. Some of 
these examples are stated below. 

Set conversion, ordering conversion, and calculation conversion are included in control 
confusion-ization. 

The flows of control of a fruit are hidden behind an un-functional sentence unsuitable to 
calculation conversion, Removing abstraction of the flows of control of introducing [ a 
corresponding high level language construct ]-by object code level which does not exist at all- 
code sequence;, and a fruit, or introducing a spurious thing is included. 

when the 1st classification (flows of control) is taken into consideration, there is correlation with 



the Cyclomer tick and nesting complexity metric strong between the complexity the code of a 
piece has been perceived to be, and the number of predicates which it contains — thing 
suggestion is carried out. An ambiguous predicate enables construction of the conversion which 
introduces a new predicate in a program. 

When drawing 11 a is referred to, ambiguous predicate P T is S=Si. — It is inserted into basic 
block S which is S n . In this way, S is divided into a half. Since a P T predicate will always be 
evaluated to "truth", it is an unsuitable code. In drawing 1.1 b, S is again divided into two halves 
and these halves are changed into different two confusion-ized finishing version S a and S b . It 
becomes therefore, less clear to a reverse engineer that S a and S b achieve the same function. 

Although dj^wjng_iLc is similar with djiwngJJ^b, the bug is introduced in S b . A P T predicate 
always chooses the right version of code S a . 

Confusion-ized conversion of another type is data conversion. An example of data conversion is 
carrying out the inverted structure interpretation of the array in order to increase the complexity 
of a code. One array can be divided into two or more sub arrays, and two or more arrays can be 
annexed to a single array, or the dimension of an array can also be increased or (flattening) 
decreased again (folding). Drawing 24 shows a fixed number of examples of array conversion. In 
the sentence (1-2), the array A is divided in the two sub arrays Al and A2. A2 includes an 
element with odd indices including the element in which Al has even indices. The sentence (3-4) 
has illustrated how interleave is carried out and the two integer arrays B and C get so that they 
may produce one array BC. The element from B and C is diffused uniformly [ a rear spring 
supporter ] in the whole changed array. The sentence (6-7) has illustrated folding to the array Dl 
of the array D. This conversion introduces the data structure which was lacking conventionally, 
or removes the existing data structure. In this way, for example, when declaring a two 
dimensional array, since a programmer performs it in the state of mapping on the data in which a 
selected structure usually corresponds, for one purpose, the ambiguity of a program may increase 
substantially. 

If fold of the array is carried out to 1-d structure, a reverse engineer will be deprived of precious 
pragmatic information. 

Another example of confusion-ized conversion is prevention conversion, in contrast with control 
or data conversion, the main last purpose of prevention conversion is not to program vaguely for 
human being's reader, and there is in making known automatic confusion release technology 
more difficult, or carrying out exploitation of the known problem within the present confusion 
release machine or decompiler. Such conversion is peculiar respectively and is known as 
conversion of a target. An example of peculiar prevention conversion is carrying out reorder of 
for-loop to run backward. Such re-ordering is possible when a loop does not have loop support 
model data subordinacy at all. The confusion release can conduct the same analysis and can carry 
out reorder of the loop to forward direction execution. However, when false data subordinacy is 
added to the reversed loop, discernment of a loop and its re-ordering will be prevented. 

The further specific example of confusion-ized conversion is stated in the portion of detailed 
explanation of following desirable embodiments. 



Detailed explanation of a desirable embodiment It is becoming a general **** target to distribute 
software with the form holding most or all of information that exists in an original source code. 

One important example is a Java byte code. Since deconstructivism BAIRU is easy for this code, 
the danger of an attack of malicious reverse engineering is increased. 

Therefore, according to one embodiment of this invention, two or more technology for technical 
protection of software security is provided. In detailed explanation of a desirable embodiment, 
about automatic code confusion-ization being the method most implementable now for 
preventing reverse engineering, we prove and are going to go. Next, we describe the design of 
the code confusion-ized machine which is a confusion-ized tool which changes a program into an 
understanding and the equivalent in which it is still more difficult to carry out reverse 
engineering. 

The confusion-ized machine is based on application of code conversion similar to what a 
KOMBAIRA optimization program uses in many cases. Describe much starting conversion, 
classify them and The effect (for example, to what extent is human being's reader perplexed?), 

They are evaluated about elasticity (for example, can it be equal to the attack of automatic 
confusion release however?), and cost (for example, is how much performance overhead added 
to the application?). 

The measure considered that it can use a confusion-ized machine at the end to various confusion 
release technology (for example, program splicing) and them is described. 

1 . Introduction If sufficient time, efforts, and a decision are given, the able programmer will 
always be able to do reverse engineering to any applications. The reverse engineer who gained 
physical access to application can do deconstructivism BAIRU of it (using a disassembler or 
deconstructivism BAIRA), and then can analyze the data structure and flows of control. Also 
manually this is made and can also be performed using the reverse engineering tool like a 
program sheer. 

Reverse engineering is not a new problem. However, until reverse engineering is difficult and 
recent years come (although it is by no means impossible), since it was a native code to which a 
great portion of program is large-sized, and is monolithic, and is shipped in the state of a strip, A 
software developer has a problem referred to as not having paid attention so much in reverse 
engineering. 

However, this situation is changing as it becomes a general **** target that carrying out 
decompile and reverse engineering distributes software with an easy form. As an important 
example, there is a Java byte code and architecture neutral distribution format (ANDF). 

Especially Java application has raised the problem for a software developer. These are 
distributed on the Internet as a Java class file which is a virtual-machine code of the hardware 
independence which holds the original Java source information altogether as a matter of fact. 
Therefore, these class files are easy to decompile, and since many of calculations are performed 



in a standard library, a Java program is boiled occasionally, is carried out, and its size is small, 
therefore it is comparatively apt to carry out reverse engineering. 

A Java developer's main concerns are not the thorough re-engineering of all applications. Such 
action is the Copyright Act clearly. From the ability for [29] to be broken and fight for a lawsuit, 
it is that it is comparatively valueless. It is expected to say that a competition partner can extract 
the algorithm and data structure in which an ownership opinion is possible from the application, 
and that the developer is most afraid can incorporate it now in the program of its company rather. 

This not only gives a competition partner commercial validity (it is because development time 
and cost are reduced), but is also that detection and legal pursuit are difficult. A powerful 
company with an infinite budget concerning [ the point of this last ] law It is especially applied to 
the small-scale developer who probably does not have the economic strength which performs the 
legal battle over a long period of time to [22]. 

Drawing 2 is provided with the outline of protection of various forms for providing the legal 
protection of computer software or security. (a) — the classification of target 

information, (d) layout confusion, (e) data confusion, (f) control confusion, and (g) prevention 
confusion is provided by the kind of protection to malicious reverse engineering, the quality of 
(b) confusion-ized conversion, and (c) confusion-ized conversion. 

A software developer argues below about various forms of technical protection of an available 
intellectual property. Although this argument is restricted to the Java program distributed on the 
Internet as a Java class file, most results are applied also to other languages and an architecture 
neutral format so that clearly [ a person skilled in the art ]. The only rational approach against 
protection of a move code proves a certain thing by code confusion-ization. Furthermore, we 
present some confusion-ized conversion, classify these according to validity and efficiency, and 
show how it enables it to use them within an automatic confusion-ized tool. 

The remaining portion of detailed explanation of a desirable embodiment is constituted as 
follows. The second article shows the outline of technical protection of various forms over the 
theft of software, and code confusion-ization proves providing the prevention most economical 
now. Section 3 shows the easy outline of a design of Kava which is a code confusion-ized 
machine for Java which is under construction now. Section 4 and Section 5 have described the 
standard used for classifying and evaluating confusion-ized conversion of a different type. 
Section 6, Section 7, Section 8, and Section 9 have presented the catalog of confusion-ized 
conversion. Section 10 shows the more detailed confusion-ized algorithm. It has rounded off 
with Section 1 1 by the argument about the conclusion of a result, and the future direction of the 
formation of code confusion. 

2. Protection of intellectual property The following plots are considered. Alice is a small-scale 
software developer who wants the user to enable it to use her application by ****** probably on 
the Internet. A bob is a developer of the rival who thinks that a commercial predominance can be 
acquired to Alice, when he is able to access the key algorithm and data structure of application of 
Alice. 



The reverse engineer who considers as work changing this into two adversaries (Alice), i.e., the 
software developer who is going to protect his code from an attack, and the form which analyze 
application, reads it easily and can understand it (bob) 

Two player games between ** can be considered, here — a bob — application — the original 
source of Alice — a little — or — please care about the point that changing into a near thing is 
unnecessary. It is only required for the code by which reverse engineering was carried out to be 
able to understand for a bob and his programmer. Similarly, please also care about that Alice 
may not have even the necessity of protecting one's whole application from a bob. Probably this 
comprises "the bread code with butter" whose most is not actually the center of concern for a 
competition partner. 

Alice can protect its code from the attack of a bob using either of the legal or technical protection 
as shown in above-mentioned drawing 2 a. It is a difficult thing from economical reality that a 
small company like Alice makes the competition partner who is more greatly more powerful 
observe the law although the Copyright Act covers the software structure to be sure, more 
attractive solution has Alice in protecting one's code, when making it it become almost 
impossible to make reverse engineering technical very difficult, and to make reverse engineering 
impossible, or to realize economically at least. The trial of some first stages in technical 
protection is indicated by Gosler. (James R.Gosler,Software protection:Myth or reality? In 
CRYPTO'85 - Advances in Cryptology, pages August, 1 57- 1 985 [ 1 40-] . 

The safest approach is Alice's not selling its application at all, but selling the service rather. If it 
puts in another way, a user will connect with the site in Alice, in order to run a program distantly 
as the application itself never cannot be accessed, the electronic money of a small sum is paid 
rather each time and it is shown in drawing 3 a. That a bob gains physical access to the 
application never does not have an advantage for Alice, therefore it is to be unable to carry out 
the reverse engineering of it. The minus aspects have application in that performance far worse 
than the case where it performs locally on a user's site may be shown for the limit concerning 
network band width and waiting time with a natural thing. Partial solution is dividing application 
into the private portion run by two portions, i.e., the public part locally run on a user's site as 
shown in drawing .3. b, and remoteness (the algorithm which wants to protect Alice is included). 

Another approach will be that Alice enciphers the code, before sending its code to a user as 
shown for example, in drawing 4 a. Regrettably, this functions, only when the whole 
decipherment / execution process are performed within hardware. Such a system, Herzberg 
(Amir Herzberg.) and Shlomit S.Pinter.Public. protection of software.ACM. Transactions on 
Computer. Systems, 5. (4): November, 393-1987 [ 371-]. And it is described by Wilhelm (Uwe 
G.W1 lhelm.Cryptographically protected objects.http://lsewww.epfl.ch/- 
wilhelm/CryPO.html.1997). When a code is executed by the virtual-machine interpreter within 
software (that is most frequently right like [ Java bytecodes ]), it becomes always possible for a 
bob to monitor and decompile a decoded code. 

The Java™ programming language won popularity mainly for the architecture neutral byte code. 
Although this makes a move code easy clearly, it reduces performance by 1 figure compared 
with a native code. This drew development of the Just InTime Compiler translated into a native 



code while executing a Java byte code as it has expected. Such a translating program was able to 
be used for it so that Alice may create the native code version of its application about all the 
general architecture. When downloading application, a user's site must identify the combination 
of the architecture/operating system which it is running, for example, a corresponding version 
will be transmitted to dj^wjJigJJ) as shown. Only by the ability to access a native code, although 
the task of a bob is not impossible, it becomes still more difficult. Complexity when transmitting 
a native code increases further. Unlike the Java byte code from which a problem receives a byte 
code check before execution, I hear that a native code cannot run safely thoroughly, and there is 
on a user's machine. When Alice is the member by whom the community was trusted, it can 
accept her guarantee of not carrying out that no applications of a user are harmful at the user 
side. Probably, Alice must carry out the digital signature of it to the code under transmission so 
that it may prove to a user that a code is an original code which oneself wrote in, in order for 
**** to also confirm that it is not going to pollute application. 

There is approach of the last which we take into consideration by code confusion-ization as 
shown, for example in drawing 5 . A fundamental view is a thing of Alice letting the confusion- 
ized machine which is changed into the application which is what is harder to understand 
application far for the bob of the functionally same thing as an original copy and which is a 
program pass, and making it run one's application. We believe that confusion-ization is the 
technology in which the realization for protection of the software dealings secret that the 
attention which deserves it should be received from now on is possible. 

Unlike the server side execution, protecting one application from malicious reverse engineering 
efforts thoroughly can never perform code confusion-ization. Since the bob which was able to 
give sufficient time and decision searches the important algorithm and data structure, it can 
always examine the application of Alice. A bob may make it run a confusion-ized finishing code 
through the automatic confusion-ized release program which tries to cancel confusion-ized 
conversion in order to help these efforts. 

Therefore, the security level from the reverse engineering which a confusion-ized machine adds 
to application, for example, elaborate-izing of the conversion used with (a) confusion-ized 
machine and (b) — it is influenced by the quantity of the resources (time and space) which can 
use the power of an available confusion-ized release algorithm, and (c) confusion release 
machine. I think that he would like to copy ideally the situation in the present public key 
cryptosystem with which the dramatic difference of the cost of encryption (it is easy to discover 
a large prime number) and a decipherment (it is difficult to factor-ize a large number) exists. 

Although it is applicable in a polynominal time (polynomial time) so that it may argue below, the 
confusion-ized conversion which needs an exponential time (exponential time) for confusion— 
ization-canceling will actually exist there. 

3. The engineering drawing 6 of a Java confusion-ized machine shows the architecture of Kava 
which is a Java confusion-ized machine. The main inputs to a tool are confusion-ized levels 
which a Java class file set and a user demand. Arbitrarily, a user can provide the file of profiling 
data as he is generated by the Java profiling tool. Although a confusion-ized machine is guided, 
this information is usable so that it may check not being confusion-ized by the conversion whose 



portion frequently performed among applications is very expensive. The input to a tool is Java 
application given as one set of a Java class file. A user chooses the maximum execution time / 
space penalty (cost) allowed for the confusion-ized level (for example, effect) and confusion- 
ized machine which are needed to add to application similarly. Kava reads and carries out 
purging of the class file with all the library files by which reference directions were carried out 
directly or indirectly. A succession tree is thoroughly built with the control flow graph about the 
symbol table showing the type information about all the symbols, and all the methods. 

Kava includes the big code conversion pool described below. However, before these become 
applicable, the bus for pretreatment collects the information various type about application 
according to one embodiment. The information on some kinds has a thing in which it can collect 
using standard compiler technology, such as data flow analysis between procedures, and data 
subordinacy analysis, and is provided by the user, and deals, and a thing collected using the 
specialized technology. For example, pragmatic analysis analyzes application in order to find 
what kind of a language construct and programming idiom contain it. 

The information collected between the paths for pretreatment is used in order to choose and 
apply suitable code conversion. All the types in application of language construct may be an 
object of confusion-izing. For example, it is possible to correct for a class to be divided or 
annexed, and to be able to change or create a method, and to create new control and data 
structure and an original thing. The new construct added to application can be chosen so that it 
may become what was similar in whether it is made to the thing in source application based on 
the pragmatic information collected during the prepass. 

A translation process is repeated until the effect needed was attained or it exceeds the maximum 
cost. The output of a tool is new application usually functionally given as a Java class file set 
equivalent to an original thing. The tool could also generate the Java source file to which the 
information to which conversion was applied about it, and the information how the confusion- 
ized finishing code was related to an original code were similarly attached as notes. The source 
with notes becomes useful because of debugging. 

4. Classification of confusion-ized conversion Various confusion-ized conversion is described, 
and the remaining portion of detailed explanation of this desirable embodiment classifies and 
estimates it. The concept of confusion-ized conversion is first begun from formation-izing. 
Definition 1 (confusion-ized conversion) 

P- T ->P' is considered as legal confusion-ized conversion and the following conditions must be 
maintained in here. 

- When P cannot be ended or it ends by error condition, even if P' ends, it is not necessary to 
carry out it. 

- When that is not right, P' must end and must generate the same output as P. 

An observability action is vaguely defined as "an action of ****** which a user passes through 
and tries." Unless this, i.e., a user, experiences the side effects, P' means that it can have the side 
effects (for example, creation of a file or message sending on the Internet) which P does not 



have. We need to care about the point of not demanding for P and P' to be similarly efficient. As 
a result of the thing of many of our conversion, P' becomes slower than P or will actually use 
many memories rather than P. 

The main division lines between the classes from which confusion-ized technology differs are 
shown in drawing 2 c . It classifies [ 1st ] confusion-ized conversion according to the kind of 
target information first. Some simple conversion is aimed at the lexical structure (layout) of 
application called source code formatting, and the name of a variable. The more elaborate 
conversion which is an object of interest is aimed at either the data structure used by application, 
or its flows of control in one embodiment. 

It classifies [ 2nd ] conversion according to the kind of OBERESHON performed about target 
information. Two or more conversion which operates contrast or a set of data exists so that it 
may understand, if d-2 g of drawing 2 is seen. This conversion builds abstraction of new 
falsehood by doubling the data or control which decomposes the abstraction standardly created 
by the programmer or is unrelated, and making it a bunch. 

Similarly, some conversion affects ordering of data or control. The turn that two items are 
declared in many cases, or two calculations are performed does not have any effects to the 
observability action of a program. However, the far useful information embedded in the selected 
order for the programmer who wrote in the program, and the reverse engineer may exist. As two 
items or a phenomenon is near spatially or in time, the probability that they have a relation in one 
of forms becomes higher. Ordering conversion tends to investigate this by randomizing an order 
of declaration or calculation. 

5. Before trying the design of confusion-ized conversion of either evaluation of confusion-ized 
conversion, the quality of this conversion must be able to be evaluated, or [ that it is what adds 
two or more standards, i.e. how much / them / ambiguity, to a program in this section, or (for 
example, effect) they cannot destroy easily how for a confusion-ized release machine ] (for 
example, elasticity) — and, It tries to classify conversion in accordance with the standard whether 
they add how much calculation overhead (for example, cost) to confusion-ized finishing 
application. 

5.1 Measure of effect It is defined what it means first for program P' that it is ambiguous (or 
complicated or reading is impossible) further from the program P. 

Such metric one of all the may be comparatively uncertain from it being based on human being's 
recognition capability (part) on a definition. 

Fortunately, many researches in software complexity metric branching of software engineering 
can be used. In this field, metric one means helping construction of the software which reading is 
possible and reliability can maintain highly, and it is designed, it is based on boiling metric one 
occasionally, carrying out it, it calculating various theque CHUA characteristics of a source 
code, and combining these enumerated data to the measure of complexity. Other things were 
purely speculative although derived from the experimental research of the formal program with 
actual some proposed so far. 



The formula of the detailed complexity seen in metric document can be used for deriving the 
general sentence like "except for the point that P' contains more characteristics q compared with 
P, when the same, P' has the program P and P' still more complicated than P." When such a 
sentence is given, we can try to build the conversion which adds more q-characteristics to a 
program, getting to know that a possibility that this will increase the ambiguity is high. 
E(X) of drawing.7Js the complexity of the software configuration element X. 
F is a function or a method, C is a class, and P is the table which is a program and which 
tabulated some of more reputable complexity measures. 

When used in a software construction project, the standard last purpose is to make these 
measures into the minimum. 

Contrary to this, when confusion-izing a program, we generally think that he would like to make 
a measure into the maximum. 

We can formalize the concept of effect by complexity METORIKKUSU, and this will be used as 
a measure of the usefulness of conversion below.Privately, one conversion is effective when 
carrying out the outstanding work which confuses a bob when it hides the intention of the 
original code of Alice. If it puts in another way, the effect of conversion will measure whether 
compared with an original code, it is hard for human being to understand a confusion-ized 
finishing code however. This is formalized in the following definitions. : The definition 2 
(conversion effect)T is considered as action preservation conversion, and P- T ->P' changes a 
source program into target program P'. Let E (P) be the complexity of P as one of metric one of 
the of drawing 7 defines. 

The effect of T pot (P), i.e., T to the program P, is the measure of a grade that T changes the 
complexity of P. It defines as this and T pot (P) def =E(P')/E(P)-l . the case where T is T pot (P) >0 ~ 
the effect ~ it is powerful confusion-ized conversion. 

In this argument, effect is measured on a three-point graduation (low, inside, quantity). 
The observations in the table 1 enable us to list some desirable characteristics of the conversion 
T. T — the effect — in order to be powerful confusion-ized conversion, it is required for it to 
perform the following things. 

- Increase the whole program size (ui) and introduce a new class and method (u a 7). 

- Introduce a new predicate (U2) and increase the nesting level (U3) of conditional and a looping 
construct. 

- Increase the number of method arguments (u 5 ), and the instance variable subordinacy between 
classes (u 7). 

- Increase the height (u b ' C 7) of a succession tree. 

- Increase long range variable subordinacy (U4). 

5.2 Measure of elasticity It glances and it seems that it is trivial to increase T po t (P). For example, 
in order to increase U2 metric, what we should make is only adding some arbitrary if sentences to 
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Regrettably, such conversion is not helpful as a matter of fact from it being easily canceled by 
simple automatic technology and getting by it. Therefore, it is required to introduce the concept 
of the elasticity which measures whether conversion can bear however under the attack of an 
automatic confusion release machine. For example, the elasticity of the conversion T, : which 
can be seen as combination of the following two measures — namely, — programmer's efforts:, 
although the automatic confusion-ized release machine which can reduce effectively the effect 
which is T is built. Quantity of the time needed: Reach. Efforts of a confusion release machine: 

Time and space which are needed for this automatic confusion release reducing the effect of T 
effectively. 

It is important to distinguish elasticity and effect. It is elastic when it is effective when it tends to 
confuse human being's reader, but conversion confuses an automatic confusion-ized release 
machine. 

Elasticity is trivial or is measured on the graduation of until one-way as shown in drawing 8 a. 
One-way conversion is special in the meaning that they must never have been canceled. This is 
because the information from the program which is not required in order to execute a program 
correctly, although these conversion was useful for human being's programmer is removed 
standardly. As an example, formatting is removed and the conversion which carries out the 
scramble of the variable identifier is included. 

Standardly, although other conversion does not change the observability action, it adds to a 
program information which increases the "information load" to human being's reader and which 
is not helpful. These conversion can be canceled with the degree of difficulty to change. 

Drawing 8 b shows that efforts of a confusion-ized release machine are classified as either a 
polynomial time or an IKUSUBONENSHARU time. The work needed for automating a 
programmer's efforts, i.e., confusion-ized release of the conversion T, is measured as a function 
of the range of T. This is based on the intuitive ability that it is easier to build the measure to the 
confusion-ized conversion to which a twist also has only on the small portion of the procedures, 
to what can have on the whole program. 

:, i.e., T, defined using the term which borrowed the range of conversion from the code 



optimization theory is local transformation when it affects the single basic block of control flow 
graph (CFG). 



When affecting the whole CFG, it is global-area conversion, when affecting the information flow 
between procedures, it is conversion between procedures, and it is interprocess conversion when 
affecting the interaction between the control threads which it performs independently. 

The definition 3 (conversion elasticity)T is considered as action preservation conversion, and 
P=T=>P' changes the source program P into target program P'. T res (P) is the elasticity of T to the 
program P. T res (P) is one-way, when information is removed from P so that P may not be 
reconstructed from P'. Otherwise, it is T res de - elasticity (T D Eobfuscator effort, T programmer effort) and 
elasticity is the function defined in the matrix in drawing 8 b here. 

5.3 In gnyjhicj^ale^2lLof execution cost, it turns out that effect and elasticity are two of three 
components which describe one conversion. The 3rd component, i.e., the cost of conversion, is 
the execution time or the space penalty which conversion invites to confusion-ized finishing 
application. 

we classify cost on a four-point graduation (no charge, cheapness, and a high price — 
extraordinary), and define each marks of these below. 

Consider the definition 5 (conversion cost)T as action preservation change, and T cost (P) 
** {unreasonableness, becoming a high price, cheapness, and no charge} — execution of P' — P — 
0 (1) individuals ~ the case where many resources are needed — T cost (P) = no charge ;P execution 
of — P — 0 (n) individuals — the case where many resources are needed - T cost (P) = - 
inexpensive ;P >1 — execution of P' — P — 0 (n p ) 

an individual ~ the case where many resources are needed ~ T C0St (P) = expensive; ~ again — 
otherwise, T C0St (P) = — being extraordinary (that is, execution of P' needs large resources more 
nearly exponentially than P) — it carries out. 

The actual cost which accompanies exchange should care about being influenced by the 
application environment. For example, the simple quota sentence a= 5 inserted in the best level 
of a program is covered only with a constancy overhead. The same sentence inserted in the 
inside of an internal loop will have substantial still higher cost. Unless other indication can be 
found, we are always provided with the cost of conversion as if it was applied to us by the 
nesting level of the outermost part of a source program. 

5.4 Nature measure Here, the formal definition of the quality of confusion-ized conversion can 
be shown. : Definition 6 (quality of conversion) 

:T qua i(P) = by which nature T qua i [of the conversion t] (P) is defined as the effect of T, elasticity, and 
combination of cost (T pot (P), T res (P), T cost (P)). 

5.5 Layout conversion Before investigating new conversion, it sees simply about typical trivial 
layout conversion, for example in present Java confusion-ized machine called Crema. (Hans 
Peter Van Vliet.Crema....Java confusion-ized machine.) http.//web.inter.nl.net/users/H.P.van.Vl 
iet/crema, html, January, 1996. The 1st conversion removes sometimes available source code 
formatting information within a Java class file. This from it being unrecoverable once original 
formatting passes away. Are one-way conversion and only very slight semantic contents exist in 
a certain; formatting, Since big confusion is not drawn at all when the information is removed, 
this is conversion of no charge [ affect / by the last which is conversion of low effect / this / the 
space and the time complexity of application ]. 

Scrambling of an identifier name is one-way and free conversion similarly. However, since the 



identifier includes many pragmatic information, it has an effect far higher than formatting 
removal. 

6. Control conversion The catalog of confusion-ized conversion is introduced in this section and 
the following several Section, the some are derived from conversion of the well-known used in 
other fields, such as compiler optimization and software re-engineering, and other things are 
developed only for the purpose of confusion-izing according to one embodiment of this 
invention. 

In this section, the flows of control of source application are stated about the conversion which it 
is going to make ambiguous. We classify these conversion as what affects a set of a control flow, 
ordering, or calculation as shown in dj^winjliLf. Whether mutual imputation being divided 
logically and the calculation which both does not belong are annexed by control set conversion. 

Control ordering conversion randomizes an order that calculation is carried out. The calculation 
conversion can insert a new (redundant or dead) code, or can make an algorithm change to 
source application. 

Probably, about the conversion which changes flows of control, a constant rate of calculation 
overheads will be inescapable. For Alice, this means that she may be pressed for selection 
between a dramatically efficient program and the program confusion-ized extremely. She can be 
assisted when a confusion-ized machine enables it to perform selection between inexpensive 
conversion and expensive conversion in this trade-off. 

6.1 Ambiguous predicate When designing control change conversion, there is actual SUBJECT 
also in making them into a tolerance **** thing not only to making it inexpensive but to the 
attack from a confusion-ized release machine. In order to attain this, it depends for much 
conversion on an ambiguous variable and existence of an ambiguous predicate. Privately, the 
variable V is ambiguous when it has some characteristics q which the confusion-ized release 
machine of what is transcendentally known by the confusion-ized machine cannot deduce easily. 

When similarly it is very difficult for a confusion-ized machine for a confusion-ized release 
machine to deduce the result of what is well-known, the predicate P (Boolean expression) is 
ambiguous. 

It is a key to the control conversion which is main challenges and is extremely elastic for the 
maker of a confusion-ized tool for a confusion-ized release machine that a break through can 
create a difficult ambiguous variable and predicate, we measure the elasticity (namely, the 
tolerance over a confusion-ized release attack) of an ambiguous variable or a predicate on the 
same graduation as conversion elasticity (namely, trivial one, weakness, strength, and full — one- 
way). 

we measure the added cost of an ambiguous construct similarly on the same graduation (namely, 
no charge, cheapness, and a high price — extraordinary) as conversion cost. 

In the point p in a program, the definition 7(ambiguous construct) 1 ** variable V is ambiguous, 
when it has the characteristic q in the point p known for the confusion-ized time. From the 



context, in us, p writes this to be V q p or V q , when clear. In p, the predicate P is ambiguous, when 
the result is known for the confusion-ized time. We write it as P F P (P T P ), when P always evaluates 
imitatively (truth) in p, and P sometimes writes them to be P p , when sometimes evaluating 
imitatively, truth and. From the context, p will be omitted also here again, when clear. Drawing 9 
shows the ambiguous predicate of a different type. A solid line expresses the course which may 
sometimes be taken and a dashed line shows the course never taken. 

Below, some examples of a simple ambiguous construct are shown. It is easy to build these for a 
confusion-ized machine, and easy to decode them similarly for a confusion-ized release machine. 
Section 8 provides the example with far high elasticity of an ambiguous construct. 

6.1.1 Trivial and weak ambiguous construct The ambiguous construct is trivial when a 
confusion-ized release machine can decode it by statistical local analysis (that is, the value can 
be deduced). Analysis is local when it is restricted to the single basic block of control flow 
graph. DraME&iiL a an d 10b provide the example of a (a) trivial ambiguous construct and a (b) 
weak ambiguous construct. 

Similarly, we consider that this variable is trivial, when one ambiguous variable is calculated to a 
library function using the simple semantics understood well from a call. About a language like 
Java™ which is a language which needs all the enforcement for supporting a standard library 
class set, the starting ambiguous variable is built easily. intV s whose simple example is a library 
function with which random (a, b) returns one integer of a...b within the limits [1,5]- Random 
(1,5) 

It comes out. Regrettably, confusion-ized release is easy for the starting ambiguous variable in a 
similar manner. It is only required to carry out pattern matching about a function call within the 
code which the confusion-ized release machine designer tabulated the semantics of all the simple 
library functions, and then was confusion-ized. 

An ambiguous construct is weakness when a confusion-ized release machine can decode it by 
static global-area analysis. Analysis is global when it is restricted to single control flow graph. 
6.2 calculation conversion : by which calculation conversion goes into the following three 
categories — that is, ; which hides the flows of control of a fruit behind the unrelated sentence 
which does not contribute to actual calculation — by the object code level in which the 
corresponding language construct of a high level does not exist at all, a code sequence is 
introduced, flows-of-control abstraction of a fruit is removed, or a spurious thing is introduced. 

6.2.1 Insertion U2 of a dead code or an unrelated code and U3 metric have suggested that 
correlation strong between the complexity the code of a piece has been perceived to be, and the 
number of predicates which it contains exists. If an ambiguous predicate is used, the conversion 
which introduces a new predicate in a program can be devised. 

Basic block S=Si in drawing 11 .... S n is taken into consideration. In drawing 1 1 a, slurring- 
speech P T is inserted into S and it is fundamentally divided into a half. In order that it may 
always evaluate a P T predicate truly, it is an unrelated code. In drawing 11 b, it progresses in 
order to divide S into two halves also here again, next to create different two confusion-ized 



finishing version S a of this 2nd half, and S b . S a and S b will be created by applying a different 
OBS conversion set to the 2nd half of S. Therefore, it is not directly clear to a reverse engineer 
that S a and S b achieve the actually same function. We use predicate P 7 , in order to perform 
selection between S a and S b in run time. 

Although drawing 1 1 c is similar with drawing 1 1 b, it introduces a bug in S b shortly. 
A P T predicate always chooses right version S a of a code. 

6.2.2 Extended drawing 12 of loop conditions shows what-izing of the loop can be carried out [ 
**** ] by making conclusion conditions more complicated. In the P T or P F predicate which does 
not have influence, I hear that a fundamental view extends loop conditions to the number of 
times a loop is due to perform, and it is in it. 

For example, the predicate which we added by djiwingj^d is always evaluated truly from it 
beingX 2 (X+l) 2 =0(mod4). 

6.2.3 conversion to an irreducible flow graph from reducible It is alike occasionally, it carries out 
and a programming language is compiled by the native or virtual-machine code which has power 
of expression further from the language itself. When this is applied, we can devise language 
division conversion in this way. That conversion is language division conversion is a case where 
it introduces the virtual-machine (or native code) instruction sequence in which which source 
language construct does not have direct correspondence nature at all. or [ trying for a confusion- 
ized release machine to compound an equivalent (however, superimposed) source language 
program, when faced with this instruction sequence ] — it must stop or having to abandon all 

For example, although a Java byte code has a GOTO command, a Java language does not 
have a corresponding GOTO statement at all. It means that arbitrary, this, i.e., a Java™ byte 
code, flows of control can be expressed, and the Java™ language can, on the other hand, express 
only the only structurized flows of control (easily). Although the control flow graph generated 
from the Java™ program always serves as reducible standardly, it can be said that the Java™ 
byte code can express an irreducible flow graph. 

Since it becomes very difficult to treat expression of an irreducible flow graph in a language 
without GOTO, we build the conversion which converts a reducible flow graph into an 
irreducible flow graph. This can be performed by changing the structurized loop to a loop with a 
multiplex header. For example, it is made for it to turn out in drawing .1 3 a that ambiguous 
predicate P F is added to a While loop, and the jump to the center of the loop exists. In fact, this 
branching is never taken. 

Java™ decompiler must stop having to change an irreducible flow graph to what will not 
reproduce a code or contains a foreign Boolean variable. Alternatively, a confusion-ized release 
machine guesses that all the irreducible flow graphs were generated with the confusion-ized 
machine, and it becomes possible to only remove an ambiguous predicate. Since this is opposed, 
the alternative conversion sometimes shown in drawing .1.3 _b can be used. When a confusion-ized 
release machine removes P F blindly, the code obtained as a result becomes less right. 



Especially drawing i.3 a and 13b have illustrated the conversion for changing a reducible flow 
graph into an irreducible flow graph. In drawing 13 a, the loop body S2 is divided into two 
portions (S a 2** and S b 2), and a false jump is inserted at the beginning of S b 2. Similarly in drawin g 
I3_b, SI is divided into two partial S a i and SY S b j is moved into a loop and ambiguous predicate 
P T ensures that S b is always performed in front of a loop body. 2nd predicate Q F ensures that S b i 
is performed only once. 

6.2.4 Depend on the call to a standard library for the program of most which is written in by 
removal Java of a library call and programming idiom greatly. Since the semantics of a library 
function is well-known, this call may provide an advantageous cue to a reverse engineer. The 
reference directions to a Java library class are always based on a name, and a problem gets worse 
according to the fact that these names cannot be confusion-ized. 

In many cases, the confusion-ized machine could oppose this by providing the original version of 
a standard library simply. For example, the call to a Java (hash table enforcement is used) 
dictionary class is red although accompanied by the same action. - It may be changed to the call 
to the class carried out as a black tree. Although the cost of this conversion is not so large about 
execution time, it is large about the size of a program. 

A similar problem also generates Cliche (or pattern) who is the common programming idiom 
frequently generated with much applications. The reverse engineer of a rich experience jumps 
over an understanding from ** about the program do not get it used to seeing. - The pattern to 
apply will be searched in order to start. The linked list in Java™ is taken into consideration as an 
example. A Java™ library does not have at all a standard class which provides common list 
operations, such as insertion, deletion, and listing. 

Instead, most Java™ programmers will build an object list as a special thing by doubling and 
linking them on the next field. Repeatedly it lets this list pass, it is the pattern which was 
dramatically common in the Java™ program. Technology invented in the field of the automated 
program recognition (Linda Mary Wills, automation program recognition by which refer to it and 
entailment is carried out to this book; feasibility) [ and ] artificial intelligence and 45(1 -2); 1 13 - 
172-1990 reference — referring to it — it is usable because of discernment of a common pattern, 
and substitution with not so clear a thing. For example, in the case of a linked list, in an element 
array, it may be not so common a thing called cursor, and a standard list data structure may be 
expressed. 

6.2.5 Table interpretation One of the most effective (and it is expensive) conversion is a table 
interpretation. A view converts one Type (this example Java byte code) of a code into a different 
virtual-machine code. This new code is executed by the virtual-machine interpreter by which 
entailment was carried out with confusion-ized finishing application at this time. Clearly, two or 
more interpreters which perform the Type which accepts a respectively different language, and 
from which confusion-ized finishing application differs may be contained in specific application. 

Since the slowdown of a single figure usually exists about each interpretation level, this 
conversion should be reserved by the Type of the code which constitutes the small portion of 



overall run time, or needs protection of a high level dramatically. 

6.2.6 Addition of redundant operand If the ambiguous variable of once some is built, an algebra 
principle can be used in order to add a redundant operand to arithmetic expression. In this way, 
Ui metric will increase. In the case of the integer expression whose numerical system is not a 
problem, this technology functions best clearly. In the sentence (1') whose following has been 
confusion-ized, the ambiguous variable P whose value is 1 is used. In a sentence (2'), a value 
builds ambiguous subexpression P/Q which is 2. When a sentence (2') is reached clearly, as long 
as those quotients are always set to 2, it can be made to take a value which is different during 
program execution at P and Q. 

(1) X=X+V;= T => (1') X-X+V*P _1 ; 

(2) Z=L+1; (2') Z=L+(P~ 2Q /CT P/2 )/26.2.7 Parallelization of a code Automatic parallelization is 
important compiler optimization used for increasing the performance of application of running 
on a multi-BUROSESSA computer. The Reason which wants us to parallelize a program is 
various with a natural thing. It is not for our increasing performance, and in order to make actual 
flows of control ambiguous, it desires to increase parallelism. : with two available operations 
considered, i.e., 1., — the dummy process which does not perform a useful task at all can be 
created. The serial Type of 2. application codes can be divided to the multiplex Type performed 
in parallel. 

When application is running on an unit processor computer, we can expect having an execution 
time penalty with these great conversion. Since the elasticity of these conversion is high, this can 
be accepted in many situations. That is, since the number of the execution paths which let a 
program pass and which are considered becomes large exponentially with the number of 
execution processes, static analysis of a parallel program is dramatically difficult. Probably, it 
turns out that :, i.e., a reverse engineer, in which parallelization also produces the effect of a high 
level again is what a parallel program is harder to understand far compared with a sequential 
program. 

When it does not include data subordinacy at all, 1 code Type is parallelized easily and it deals in 
it, as shown in drawing 14. For example, these can be run in parallel to the case where Si and S: 
are two data independence type sentences. In the programming language which does not have an 
explicit parallel construct like a Java™ language at all, a program may be parallelized using the 
call to a thread (light weight process) library. 

A code Type including data subordinacy as shown by drawing 15, By inserting a suitable 
synchronization unmodified instruction called an away and advance, it may be divided to a 
concurrency thread (Michael Wolfe by which entailment is carried out to this book as reference, 
highly efficient compiler Addison- Wesley for parallel computing, 1996.). Refer to ISBNO- 
8053-2730-4. Although such a program is run sequentially fundamentally, flows of control will 
be shifted from one thread to the following thread. 

6.3 Set conversion A programmer conquers the peculiar complexity of programming by 
introducing abstraction. Procedure abstraction is the most important although abstraction exists 
on many levels of one program. Since it is such, for a confusion-ized machine, it is important to 
make a procedure and a method call ambiguous, and it obtains. Below, it takes into consideration 



about some methods of making a method and a method call ambiguous, i.e., in-line processing, 
outline processing, interleave, and cloning. The code (since ****** W as probably carrying out 
mutual attribution logically) to which : with the same fundamental idea that is back [ these / all ], 
i.e., (1) programmer, gathered to one method is divided, The code considered not to belong to 
that it should distribute over the whole program and both (2) is gathered by the form of one 
method. 

6.3.1 In-line one and outline method In-line processing is compiler optimization important with a 
natural thing. This is also very useful confusion-ized conversion from removing procedure 
abstraction from a program. In-line processing is high conversion of elasticity very much from 
the trace of abstraction not remaining at all in a code, when a procedure call is once replaced by 
the main part of the called procedure and the procedure itself is removed (this is fundamentally 
one-way). 

.In-line processing of Procedures P and Q is carried out what at the call site, and drawing 16 
shows whether next, it is removed from a code. 

Outline processing (let me change a series of sentences to a subroutine) is the very useful sister 
exchange to in-line processing. We create false procedure abstraction by extracting the end of the 
beginning of the code of Q, and the code of P to the new procedure R. 

In the object-oriented language like a Java™ language, in-line processing is not necessarily 
conversion completely one-way as a matter of fact always. I will consider method call m.P(). The 
actual procedure called will be influenced by the run time type of m. Calling two or more 
methods at a specific call site, or when it can do, we do in-line processing of all the methods 
considered (Jeffrey Dean, all the program optimization of an object-oriented language by which 
entailment is carried out to this book as reference.), refer to the University of Washington 
doctoral dissertation and 1996 ~ a suitable code is chosen by branching about ma type. 

Therefore, even as for after the in-line processing of a method, and removal, the confusion-ized 
finishing code may include the trace of original abstraction for or a little still more. For example, 
drawing 1 7 has illustrated the in-line processing of a method call. Unless the type of m can be 
determined statistically, all the methods which can tie up m.P() and which are considered call, 
and in-line processing must be carried out at a site. 

6.3.2 Interleave method Detection of an interleave method is an important and difficult reverse 
engineering task. 

Drawing 18 shows whether what we do with the interleave of the two methods declared in the 
same class. The main part and parameter list of a method are annexed, and a view adds an 
excessive parameter (or global variable), and discriminates from the call to each method. Ideally, 
character should be similar so that a method may enable annexation of a common code and a 
parameter. The case of drawmg..l.8..is this and the 1st parameter of Ml and M2 has the same type 
here. 

6.3.3 Clone method When you are going to understand the purpose of a subroutine, a reverse 
engineer will inspect the signature and main part with a natural thing. However, different 
environment where the call of it is carried out is important for understanding the action of a 
routine similarly. We can make this process still more difficult actually by confusion-izing the 



call site of a method to make it it seem that a routine which is different although that is not right 
is being called. 

Drawing 19 c an create a different version of the plurality of a method by applying a confusion- 
ized conversion set which is different in an original code. We use method dispatch for choosing 
between versions which are different in run time. 

Although method cloning is similar with predicate insertion conversion of drawing j 1, it differs 
here in that it is said that it is going to use not an ambiguous predicate but method dispatch for 
choosing between bar SHON from which a code differs. 

6.3.4 It meant improving the performance of loop conversion (especially) numerical value 
application, and much loop conversion has been designed. About extensive investigation, it is 
Bacon. Refer to [2]. Since some of these conversion increases complexity metric mentioned 
above about drawing 7 . they are useful for us. Loop blocking as shown in drawing 20 a is used, 
in order that an internal loop may improve the cash action of a loop by dividing interaction space 
so that it may fit in cash. The roux PUAN roll reproduces the main part of 1 time or a multiple- 
times loop as it is shown in di2wjrig_20_b. It is a compile time point, and when the loop boundary 
is known, on the whole, it can act as Ain Rolle of the loop. Loop division as shown in drawing 
20 c is changed to two or more loops accompanied for the loop accompanied by a compound 
main part by the same repetitive space. 

Since all of three conversion increase the sum total code size and the condition number of source 
application, it increases Ui and U2 metric. Similarly, loop blocking conversion introduces 
excessive nesting, therefore U3 metric increases it. 

It dissociates, and when applied, the elasticity of these conversion is very low. Great static 
analysis does not need a confusion-ized release machine to roll again the loop which acted as Ain 
Rolle. However, when conversion is put together, elasticity rises dramatically. For example, 
when the simple loop of drawing ^ 20 b is given, we apply Ain Rolle first, and division can be 
applied to the next and, finally we can apply blocking. Probably, analysis of quantity most for a 
confusion-ized release machine is needed in order to return the loop acquired as a result to the 
original form. 

6.4 Ordering conversion A programmer has the tendency to organize one's source code so that 
the locality may be made into the maximum. In a similar manner [ two logically related items ] 
within a source text, when physically near, a program reads a view further, and it becomes easy 
to understand it. Locality exists between the method in the sentence between the clauses in :, for 
example, a formula, on which this kind of locality functions on all the levels of a source, and in a 
basic block, the basic block in a method, and a class, and the class in a file. The spatial locality of 
all the kinds can provide a useful cue to RE. Therefore, in being possible, we always randomize 
arrangement of the arbitrary items in source application. About the item (for example, method in 
a class) of some types, this is trivial. In order to discern which re-ordering is technically effective 
(for example, sentence in a basic block) in other cases, it is data subordinacy analysis (entailment 
is carried out to this book as reference (David F.Bacon, Susan L.Graham, and Oliver J.Sharp.)). 
Compiler conversion A CM Computing Surveys for high performance computation, 26(4):345- 
December, 420- 1 994, Highly efficient KOMBAIRA for 



http://www.acm.org/pubs/toc/Abstracts/0360-0300/197406.html, and Michael Wolfe, parallel 
computing. Addison- Wesley and 1996. ISBN 0-8053-2730-4 — referring to it — it is carried out. 
effect that these conversion is low — having (great ambiguity is not added to a program) — the 
elasticity is high and one-way in many cases. For example, when arrangement of the sentence in 
a basic block is randomized, the trace of an order of a basis will not remain in the code obtained 
as a result at all. 

To "in-line outline" conversion of ordering conversion, the 6th, and Section 3 or 1 especially, it 
is useful sister exchange. The effect of the conversion may be reinforced carrying out in-line 
processing of two or more procedure calls within the (1) procedure P, randomizing an order of 
the sentence in (2) P, and by carrying out outline processing of the contiguity Type of the 
sentence of (3) P. Thus, according to the inside of false procedure abstraction, it is before put 
into the unrelated sentence which were a part of several different procedures. 
It is also possible by for example making it run backward in some cases to re-order a loop. Such 
loop inversion conversion is common in a highly efficient compiler, compiler conversion ACM 
Computing Surveys for David F.Bacon, Susan L.Graham, and Oliver J.Sharp, high performance 
computation, and 26(4): - in December, 420-1994 [ 345-]. 
http .//www.acm.org/pubs/toc/Abstracts/03 60-0300/ 1 97406 .html . 

7. Data conversion This section explains the conversion which confusion-izes the data structure 
used with source application. Such conversion is classified as conversion which performs 
memory of data, coding, set, or ordering as shown in drawing 2 e. 

7.1 Memory and coding conversion In many cases, there is a "natural" method for memorizing 
the specific data item in a program. For example, assigning the local integer variable of size 
suitable as a repetitive variable will be chosen in order to repeat each element of one array, 
although other variable types are usable — being such — others ~ probably, a variable type is 
inferior in respect of nature — carrying out — probably --**-- probably, it is efficiently inferior 

The "natural" interpretation of the bit pattern which the specific variable based on the type of the 
variable can have exists in many cases. For example, generally the 16-bit integer variable which 
memorizes a BITTOBA turn "0000000000001 100" is assumed to express the integral value "12." 
With a natural thing, these are mere agreements, and other interpretations are possible. 

Confusion-ized memory conversion tries to choose an unnatural storage class for dynamic data 
and a static data. Similarly, coding conversion tends to choose unnatural coding about a common 
data type. Although memory conversion and coding conversion use them in many cases, 
combining, each of these conversion is able to be alone used depending on the case. 

7.1.1 Change of coding As a simple example of coding conversion, when ci and C2 are constants, 
the integer variable i is replaced by io=Ci*i+C2. It is possible to choose Ci as involution of 2 for 
efficiency. If [ the following example ] Ci=8 and C2=3, 



int i = l; int i = 1 1 



while (i < 1000) 



while (i < 8003) 



A[i] 



A (i 3) 8 



ill: 



i + ~8; 



It is necessary to cope with the problem of overflow (and the case of a floating point variable 
accuracy) with a natural thing. It is possible that overflow does not occur because of the range of 
the variable in question (this range can be determined by [ which use a static-analyses method ] 
depending especially or questioning a user), and to investigate that it can change into a bigger 
variable type. 

On the other hand, there may be a trade-off between elasticity and cost on the trade-off between 
elasticity and effect, and another side. A simple mark like io=Ci+i+C2 of the above-mentioned 
example 

Although ****** adds only the execution time of a slight addition, a general compiler analysis 
method (Michael Wolfe. High performance Compilers For Parallel Computing.Addl son- Wesley 
and 1996.ISBN O-8053-2730-4 - and) David F.Bacon and Susan. L. Graham and Oliver. J. 
Sharp. Compiler transformations for high-performance computing.ACM Computing Surveys, 
26(4):345-420, and December. 1994. It is possible for confusion release to be carried out using 
http.//www.acm.org/pubs/toc/Abstracts/0360-0300/197406.html. 

7.1.2 Promotion of variable Some simple memory conversion which promotes a variable exists 
in a more nearly general-purpose class from the specialized storage class. Although it is 
generally low, when used combining other conversion, the effect and elasticity of such memory 
conversion are very effective, and are obtained. For example, in Java, an integer variable is able 
to be promoted by the integer object. It is applied when the same things are other scalar types 
with which all have the corresponding class "package-ized." The object will be automatically 
removed, when an object is no longer referred to already, since Java™ supports arrangement of a 
garbage. Here, it is the example. 

int 1=1; int i = new int(l) ; 



while 



(i < 9) - T -> while (Lvalue < 9) 



. . A Li] . . . 



. . . A [i. value] . . . ; 



i + +; 



i. value + t ; 



1 



It is also possible to change the life of a variable. Such the simplest conversion changes a local 
variable into the global variable shared between the independent procedure calls later. For 
example, both P and Q are unable to be simultaneously active [ both procedure P and procedure 
Q ] with reference to a local integer variable (if a program does not contain a thread), this can be 
asked by investigating a static call graph (static call graph) — to a case, it is able to make a 
variable into a global variable and to be shared among these procedure, 
void PO { int C; 

int i ; . . . I. . . void PO { 



} 

void QO - T => while (i.value<9) 

int k;. . . k. . . . . . C. . . 

} } 

Since the number of the global-data structures referred to by P and Q is increased, this 
conversion increases us metric. 

7.1.3 Division of variable A Boolean variable and other variables within the restricted limits are 
able to be divided into two or more variables. The variable V divided into k variable pi, pk is 

described to be V-[pi pj. Typically, the effect of this conversion will increase with k. It is 

common for conversion cost to also increase with k, therefore to restrict k to 2 or 3 regrettably. 



In order to make it possible to divide the variable V of Type T into the two variables p and q of 
Type U, The three information fragments (p;q) F, i.e., the function which carries out the map of 
the value of p and q to the value of V which carries out (1) correspondence, (2) function g(V) 
which carries out the map of the value of V to the value of corresponding p and q, and (3) — it is 
required to give the new operation (it corresponds to the elementary operation to the value of 
Type T) by which the cast was carried out from a viewpoint of an operation over p and q. In the 
remaining portion of this section, V is a Boolean variable type and it is assumed that p and q are 
small integer variables. 

Drawing 2 1 a shows selection of expression which can be carried out about a division Boolean 
variable. This table shows that it is equivalent to V being an imitation, then the thing to say, 
when V is divided into p and q, and when it is p=q=0 or p=q=l on a certain point of a program. 
Similarly, p= 0 and q= 1 or p= 1, and q= 0 correspond truly. 

When shown by this new expression, the replacement about various nest binary operations (for 
example, AND, OR) must be devised. One approach is providing the execution-time look-up 
table about each operator. The table about "AND" and "OR" is independently shown in drawing 
2]_c and (|iawjiig_21_d. If it assumes that two Boolean variable Vl= [p, q] and V2= [r, s] are 
given, V1&V2 will be calculated as AND [2 p+q, 2 r+s]. 

The result of three division, Boolean variable A= [al, a2], B= [bl, b2], and C= [cl, c2], is shown 
hi djmnngJ2J__e. In order to calculate the same Boolean expression, I hear that the interesting 



side of expression which this invention person chose has some usable methods, and there is. For 
example, it differs mutually and the sentence (3') and sentence (4') of djiwmgJH-e are visible, 
although both assign an imitation to a variable. Similarly, although the sentence (5') completely 
differs from the sentence (6') mutually, both calculate A&B. 

All of the effect of this conversion, elasticity, and costs increase according to the number of a 
variable by which an original variable is divided. Elasticity is further enhanced by choosing 
coding at the time of execution. In other words, the execution-time look-up table from drawi ng 
2i_b to drawing 21 d . Although not built by compile time (this will make it possible to conduct 
static analyses to an execution-time look-up table), it is built by the algorithm contained in 
confusion-ized application. In order to calculate an elementary operation so that this may be 
performed in the sentence (6') in cU^wing J^J c with a natural thing, it prevents using an in-line 
code. 

7.1.4 Conversion to procedure data of static data The static data, especially the character string 
include many practical information useful for a reverse engineer. The method for confusion-izing 
a static string is changing a static string into the form of the program which generates the string. 

A program with possible their being DFA or a try scan (Trie traversal) is able to generate other 
strings. 

For example, I will consider the function G of drawing 22_ currently built so that a string "AAA", 
"BAAAA", and "CCB" may be confusion-ized. The values generated by G are G(l) = "AAA" 
and G (2) = "BAAAA" and G(3) =G(5) = "CCB" and G (4) (not actually used by program) = 
"XCB." In the case of other argument values, even if G is completed, it is not necessary to end. 

It is not very desirable to gather calculation of all the static string data in the form of a single 
function with a natural thing. When G function is divided into the form of the small component 
rather than embedded into the "usual" control flow of a source program, a far advanced effect 
and elasticity are realized. 

It is important to point out that it is possible to combine this technique with table interpretation 
conversion of Section 6.2.5. I hear that the intention of the confusion-izing changes one section 
of a Java byte code into the code for another virtual machine, and there is. Typically, this new 
code will be memorized as static string data within a getting [ confused ]-izing program. 
However, in order to obtain the effect and elasticity of a still higher level, the above-mentioned 
string is able to be converted into the program which generates the string as mentioned above. 

7.2 Set conversion In contrast with imperative language and a functional language, an object- 
oriented language is data-oriented rather than being control-oriented. Although in other words 
control is composed of an object-oriented program at the circumference of a data structure, it is 
not composed of other methods . — this means that the significant part of the reverse engineering 
of object-oriented application is trying restoration of the data structure of a program. 

On the contrary, it is important that a confusion-ized machine tends to conceal such a data 
structure. 



In most object-oriented languages, the number of the methods for performing the data aggregate 
is two, namely, they are a data set in the form of arrangement, and a data set in the form of an 
object. The following three sections examine the method by which such a data structure can be 
confusion-ized. 

7.2.1 If the combination range of annexation Vi of a scalar variable, Vk suits the accuracy of 
V M , two or more scalar variable Vi, V K are able to be merged into one form of variable V M . 
For example, two 32-bit integer variables are able to be merged into one 64 bit variables. The 
operation to each variable will be changed into the form of an operation over VM. As an easy 
example, it considers that the two 32-bit integer variables X and Y are annexed to the form of 64 
bit-variable Z. Following annexation type Z(X, Y) =2 32 *Y+X is used, and the arithmetic 
identical equation of drawing 23 a is obtained. Some easy examples are shown in drawing 23 b . 

It is shown that the two 32-bit integer variables X and Y are annexed by especially drawing 23 t o 
one 64 bit-variable Z. Y occupies 32 bits of Z upper parts, and X occupies 32 bits of bottoms. 
When one of the actual ranges of X or Y are able to deduce from a program, an intuitive more 
much more unclear annexation is able to be used. Dfl^jdl^JLLa shows the rule for the addition 
and the multiplication by X and Y. Drawing 23 b shows some easy examples. This example can 
be further confusion-ized by merging the form of "Z+=47244640261", for example (2') (3'). 

The elasticity of variable annexation is very low. In order to presume that a certain specific 
variable comprises two annexation variables actually, the confusion release machine should just 
investigate that the arithmetic operation set is applied to the specific variable. By introducing the 
bow gas (bogus) operation which cannot be dealt with all of an appropriate operation to each 
variable, it is possible to increase elasticity. It is possible to insert the operation which seems to 
annex two half portions of Z, for example by rotation (Z, 5), i.e., If(P F ) Z-rotate, in the example 
of drawing 23 b . 

One modification of this conversion is that Vi, V K are annexed to one arrangement suitable 
type [ following ]. 

Va= l...k Vi ... when V k Vi, V k are object reference variables, For example, the element types 
of VA are able to be all the classes which are in a level higher than any of the type of Vi, Vk 
in inheritance hierarchy. 

7.2.2 Reconstruction of arrangement Some conversion is able to be devised in order to 
confusion-ize the operation performed to arrangement, or two or more arrangement is annexed [ 
whether it divides one arrangement into some secondary arrangement, or ] to one arrangement — 
one arrangement — folding up (a number of dimension is increased) (fold) — or what is done for 
flattening of the one arrangement (a number of dimension is decreased) (flatten) is possible. 
Drawing 24 shows some examples of arrangement reconstruction. The arrangement A is divided 
into the two secondary arrangement Al and the form of A2 in a sentence (1-2). A 1 holds the 
element of A which has even indexes, and A2 holds the element which has odd indexes. 

It is shown how it is possible for the sentence (3-4) of drawing 24 to be carried out at the integer 
arrangement B, and for mutual arrangement of the C to be carried out at the form of arrangement 
BC as a result. The element from the arrangement B and the element from the arrangement C are 
uniformly distributed covering the whole arrangement acquired as a result. 



It is shown how as for a sentence (6-7), it is possible for one-dimensional-array D to be folded up 
by the form of the two-dimensional array Dl . Finally, the sentence (8-9) shows inverse 
transformation. Flattening of the two-dimensional array E is carried out to the form of the one- 
dimensional array E 1 . 

Division and folding of arrangement increase U6 data complexity metric. On the other hand, 
annexation and flattening of arrangement decrease metric one of this. Although these conversion 
may seem to show having only a small or negative effect as for this, this is easy to produce an 
error actually. I hear that complexity metric of drawing 7 is not useful to grasp the important side 
of some data structure conversion, and a problem is in it. That is, such conversion will introduce 
the structure which did not exist at the beginning, or will remove structure from an original 
program. This can increase confusion-ization of a program remarkably. For example, the 
programmer who declares two-dimensional array does so intentionally. A selected structure 
carries out the map of the data currently operated appropriately anyhow. When the arrangement 
is folded up by one-dimensional structure, the reverse engineer will be deprived of precious 
practical information. 

7.2.3 In the present object-oriented language like the correction Java™ language of succession 
relation, main modularization and an abstraction concept are classes. A class is an intrinsically 
abstract data type which encapsulates data (instance variable) and control (method). A class is 
described to be C- (V, M), V of a front type is a set which is an instance variable of C, and M is 
the method. 

In contrast with the conventional concept of an abstract data type, two class Ci and C2 succeed 
with grouping (C2 has an instance variable of type Ci) (by adding a new method and instance 
variable). It is possible for be alike in C2 extending Q to be built. Succession is described to be 
C2=CiUC'2. Succession of Ci which is the superclass or a parent class will express C2. U 
operator is a function which combines the new property defined by C'2 and a parent class. It 
depends for the exact semantics of U on each programming language. In a language like Java, 
when applied to an instance variable, it is interpreted as a merger, and on the other hand, when U 
is applied to a method, it is generally interpreted as an override. 

According to metric U7, the complexity of class Ci increases according to the depth (distance 
from a route) in inheritance hierarchy and direct posterity's number. For example, there are two 
methods with possible making this complexity increase. That is, it is possible to divide one 
certain class (factor) and to insert the class of a new imitation (bogus) as shown in drawing 25 b 
as shown in drawing 25 a. 

The problem about class factoring is the elasticity. There is nothing that prevents that the class 
by which the factor was carried out is simply annexed by the confusion release machine. In order 
to prevent this, generally, factoring and insertion are together put as shown in drawing 25 d . The 
option to which the elasticity of conversion of these types is made to increase is making to 
generate a new object about all the introduced classes into a positive thing. 

Drawing 25 c shows modification of the class insertion called "fake refactoring." refactoring is a 
technique (sometimes automatic) for reconstructing the object-oriented program in which the 
structure has deteriorated (it is taken in by this Description as reference.) William F.Opdyke and. 



RalphE.Johnson.Creating. abstract superclasses, by refactoring.In Stan. C. Kwansny and John 
F.Buck, editors, Proceedings of the 21 st Annual Conference on Computer Science, and page. 
66-73, New York, NY, USA, and February 1993 .ACM 

Press. ftp://st.cs.uiuc.edu/pub/papers/refactoring/refactoring-superclasses.ps. I would like to be 
referred to. RIFAKU Tring is a process of two steps. It is detected that two separate classes carry 
out same operation to the 1st as a matter of fact seemingly, the feature common to both classes is 
moved into a new (probably — ** — abstract) parent class by the next. Although fake refactoring 
is the same operation, it is carried out only to two class Ci without common operation, and C2. 
When both classes have an instance coefficient same type, these classes are moved into new 
parent class C3. The method of C'3 may be a version with a bug-ridden (buggy) method from Ci 
and C2. 

7.3 ordering conversion in the section 6.4, it is useful to randomize an order that calculation (it is 
when possible) is performed — **** — it was shown that it is-izing. Similarly, it is useful to 
randomize an order of the declaration in source application. 

In particular, in this invention, an order of the method in a class, and an instance variable and the 
temporary bara meta method of a method is randomized. A actual order of corresponding with a 
natural thing in the case of the latter must be re-ordered. The effect of such conversion is low and 
elasticity is a uni directional. 

In many cases, it will also be possible to re-order the element under arrangement. When it states 
briefly, in this invention, vagueness (opaque) coding function f(i) which carries out the map of 
the i-th element within original arrangement to the new position of the re-ordered arrangement is 
provided. 

1 { 
int i = l, A L10001 ; int i=l, A [ 1 0 0 0 ] ; 

while (i < 1000) - T => while (i < 1000) 

...A[il... ; ...A[f(i)]... ; 

iH; i + +; 

I } 

8. Ambiguous value and ambiguous predicate As mentioned above, ambiguous predicates are the 
main building blocks in the design of the conversion which confusion-izes a control flow. As a 
fact, the quality of almost all control conversion is directly dependent on the quality of such a 
predicate. 

The section 6.1 showed the example of the simple ambiguous predicate which has trivial and 
weak elasticity. This means that an ambiguous predicate is able to be decoded using local static 
analysis or global static analyses (an automatic confusion release machine can discover the 
value). Far more advanced resistance [ as opposed to / generally / an attack with a natural thing ] 
is needed. Although worst exponential time is ideally taken to decode it (setting in the size of a 
program), it is desirable only for polynomial time to be able to build an ambiguous predicate 



without **** to build it. This section explains such two techniques. The 1st technique is based 
on aliasing and the 2nd technique is based on the light weight process (lightweight poess). 

8.1 When ambiguous structure aliasing which uses an object and an alias is possible, the static 
analysis between procedure is always complicated remarkably. In the language which has 
dynamic allocation, a loop, and an IF statement, it cannot be exact, cannot flow and cannot 
actually opt for depended type alias analysis. 

In this section, in order to build the ambiguous predicate which is low cost and is elastic to an 
automatic confusion release attack, the difficulty of alias analysis is used. 

8.2 Ambiguous structure which uses thread A parallel program is difficult to conduct static 
analysis compared with a program one by one. The Reason is the interleaving semantics of a 
parallel program. That is, n sentences in parallel field PAR Si, S2, S n , and ENDPAR are n! 

Performing by the method by which individuals differed is possible. In spite of this, some static 
analyses of a parallel program are able to be conducted in polynomial time [18], and, on the 
other hand, others are n! It needs to take all interleaving of an individual into consideration. 
In Java, a parallel field is built using the light weight process known as a thread. (Seeing from 
this invention person's viewpoint) A Java thread has the two useful characteristics. Namely, the 
scheduling policy of (1) Java thread is not strictly specified depending on language specification, 

Therefore, it will be dependent on an implementation and the actual scheduling of (2) threads has 
the characteristic of being dependent on asynchronous events like the asynchronous events 
generated by the user interaction, and network traffic. When combined with the peculiar 
interleaving semantics of a parallel field, this means that it is very difficult to conduct the static 
analyses of the thread. 

In this invention, in order to generate the ambiguous predicate (dj^wjng_32^should be referred to) 
which needs worst exponential time for a decipherment, the above-mentioned consideration 
result is used. This fundamental idea is dramatically similar with the idea currently used with the 
section 8.2. That is, it is maintained by the state where an ambiguous inquiry is able to be 
performed, although the global-data structure V is generated and it is updated infrequently. I hear 
that V is updated by the thread under present execution, and there is a point of difference. 

It is possible for it to be a dynamic data structure like the dynamic data structure by which V was 
generated by drawing ,26 .w ith the natural thing. Into the component of each of the thread, a 
thread will move the global pointers g and h at random by performing the call for movement and 
insertion in asynchronous. This has the advantage of combining data competition with the 
interleaving effect and the aliasing effect, in order to obtain very high elasticity. 
In drawing 27 , V uses the farther simple example which are one pair of global integer variables 
X and Y, and is illustrating the above-mentioned idea. In the case of the arbitrary integers x and 
the integer y, this is based on the publicly known fact from the basic number theory [ "1 / 7y 2 -" ] 
that it is not equal to x . 

9. confusion release and prevention conversion this invention person's confusion-ized conversion 
— many (especially control conversion of the section 6.2) — it is possible to be described as 



embedding the bow gas program (bogus program) in a real program. In other words, the real 
program which getting [ confused ]-izing application comprises actually two programs merged 
into one, namely, performs a useful task, and the bow gas program which calculates useless 
information are merged into one. The only purpose of this bow gas program is to confuse a 
potential reverse engineer by concealing a real program behind an unrelated code. 

The above-mentioned ambiguous predicates are the main mechanisms which a confusion-ized 
machine can use freely, in order to prevent it from a bow gas inner program being identified 
easily and removed. For example, in drawing 28 a, a confusion-ized machine embeds the bow 
gas cord (bogus code) protected by the ambiguous predicate into three sentences of a real 
program. The task of a confusion release machine is investigating getting [ confused ]-izing 
application, identifying an internal bow gas cord automatically and removing it. In order to 
perform this, a confusion release machine must evaluate the structure, after identifying an 
ambiguous structure first. This process is shown in drawing 28 d from drawing 28 b . 



r2rawjng^9_shows the structure of a semi-automatic confusion release tool. This tool has taken 
in some publicly known techniques in the community of reverse engineering. 

The remaining portion of this section examines some of such techniques briefly, and in order to 
make confusion release into difficulty more, in it, various countermeasures (what is called 
prevention conversion) which can use a confusion-ized machine are explained. 

9.1 The prevention conversion explained above in relation to prevention conversion drawing 2 g 
completely differs in effect from control conversion or data conversion. In contrast with control 
conversion or data conversion, the main targets of prevention conversion are not covering a 
program to human being's reader. Rather, prevention conversion should make difficulty more the 
publicly known automatic confusion release technique (original prevention conversion). 
Or it is designed spy out the known problem in a present confusion release machine or 
decompiler (target prevention conversion). 

9.1.1 Originally originally [ prevention conversion ], prevention conversion generally has a low 
effect and high elasticity. The most important thing is having the capability prevention 
conversion enhancing the elasticity of other conversion originally. As an example, it is assumed 
that it is what ordering is re-finished so that a "for" loop may be performed to an opposite 
direction as suggested with the section 6.4. The Reason it was possible to have investigated that a 
loop does not have loop conveyance data subordinacy to this conversion was able to be applied. 
What prevents conducting the analysis with confusion release machine same with a natural thing, 
and returning a loop to forward direction execution does not have anything. In order to prevent 
this, it is possible to add the bow gas data subordinacy over a reverse loop. 



{ 



{ 



for(i=l;i<-10;i++) =T=> intB[50]; 

ACi] -i for(i = 10;i< = l;i — ) 

} A[i]=i; 

B[i]+=B[i*i/2] 

} 

It depends on the complexity of bow gas subordinacy, and the state of the art of subordinacy 
analysis for the elasticity which prevention conversion applies to loop re-ordering conversion 
originally [ this ] [36]. 

9.1.2 Target prevention conversion As an example of target prevention conversion, A 
HoseMocha program is considered (Mark 

D.LaDue.HoseMocha.http://www.xynyx. demon.nl/java/HoseMocha.java, January 1997). This 
program, Mocha deconstructivism BAIRA (Hans Peter.) In order to investigate the weak point of 
VanVliet.Mocha — The Java decompiler.http://web.inter.nl.net/users/H.P.van.Vliet/mocha.html 
and January 1996. It is designed specially. A HoseMocha program inserts a special command 
after all the return sentences in all the methods in a source program. Although this conversion 
does not have influence at all to operation of application, it is enough for making Mocha crash. 

9.2 Discernment and evaluation of ambiguous structure The most important portion of confusion 
release is discernment and evaluation of an ambiguous structure. Please care about that 
discernment and evaluation are separate activities, an ambiguous structure ~ being local 
(contained in a single basic block) — or — being global (contained in a single procedure) ~ or 
what is been between procedure (it is distributing over the whole program) is possible, if (x*x== 
(7 F *y*y-l)) is a local ambiguous predicate — R=X*X; ...;S=7*y*y-l; ...;if (R==S F ) ... is a global 
ambiguous technical term. Probably, a structure is an ambiguous structure between procedure, 
when calculation of R and S is performed in a mutually different procedure. With a natural thing, 
discernment of a local ambiguous predicate is easier than discernment of the ambiguous 
predicate during procedure. 

9.3 Discernment by Bataan collation The confusion release machine can use the knowledge of 
SUTORAREJI used with a known confusion-ized machine, in order to identify an ambiguous 
predicate. The designer (by decompiling a confusion-ized machine) of a confusion release 
machine, Or it is possible to build the pattern matching rule [ it is possible to investigate a 
confusion-ized machine and ] which can identify the ambiguous predicate generally used by 
investigating simply the getting [ confused ]-izing code which a confusion-ized machine 
generates. This method will work most effectively to a simple local predicate like x*x== (7*y*y- 
l)or random(l F , 5) <0. 

In order to block the trial of pattern matching, the confusion-ized machine must avoid use of an 
obligatory ambiguous structure. It is also important to choose an ambiguous structure similar to 
the structure used with real application on syntax. 



9.4 Discernment by program slicing A programmer will generally discover that an understanding 
is more difficult than a program with a getting [ confused ]-izing version of a program original 
for a reverse engineer. The "fruit" with which the main Reason (a) Is valid in the getting [ 
confused ]-izing program 

I hear that the code snippet which the dead bow gas cord was inlaid into the code, and was 
connected with (b) logic target is disassembled, and it distributes over the whole program, and it 
is. The Rybar engineer is able to use a program slicing tool, in order to oppose such confusion- 
ization. Such a tool can assist a dialogue with a reverse engineer, in order to decompose a 
program into the form of manageable chunk (chunck) called a slice. The slice of the program P 
about the point p and the variable v comprises all the sentences of P which can be contributed to 
the value of v in p. Therefore, the program sheer can extract the sentence of the algorithm which 
calculates the ambiguous variable v from a getting [ confused ]-izing program, even when a 
confusion-ized machine makes the whole program distribute such a sentence. 
In order to use a slicing as the discernment tool in which validity is more inferior, some usable 
strategies exist with a confusion-ized machine. Add parameter alias A parameter aliases are two 
temporary bara meta (or temporary bara meta and a global variable) which refers to the same 
memory location. The strict slicing between procedure increases according to the number of the 
potential alias in a program, and, on the other hand, the number of this potential alias increases 
exponentially according to the number of a formal parameter. Therefore, when a confusion-ized 
machine adds to a program the dummy parameter by which aliasing was carried out. The 
confusion-ized machine exerts coercion so that a sheer is decelerated remarkably, or a sheer may 
be made to produce an un-strict slice (when a high-speed slicing is needed) (when a strict slice is 
required). 

Unravel (and David W. James R.Lyle, Dolorres R.Wallace, James R.Graham, Keith B.Gallagher, 
Joseph P.Poole) Binkley.UnravehA CASE, tool to assist evaluation, of high integrity 
software. Volume 1 Requirements and design.Technical Report NIS-TIR 5691 and 
U.S.Departmentof. Although Commerce and addition variable subordinacy (add variable 
dependency) like the slicing tool which has generally spread like August 1995 function suitable 
for calculation of a small slice, Excessive time may be required to calculation of a larger slice. 
For example, when it was used to the C program of 4000 lines, there was a case which needed 
time to exceed for 30 minutes for Unravel completing slice calculation. In order to pull out such 
a feature compulsorily, a confusion-ized machine must increase slice size by adding bow gas 
variable subordinacy. In the following example, on appearance, although it contributes to the 
value of x, the size x of slice calculation is increased by adding two sentences which do not 
contribute actually. 

mainO I =T => mainO { 

int x=l; int x=l; 



x ~ x * 3; 



if 



CP'" ) x + +; 



x = 



X + 



VO 



x = 



3; 



9.5 Static analyses The confusion release machine can use a getting [ confused ]-izing program, 
in order to analyze the result of all predicates. Thus, the arbitrary confusion release methods 
which investigate the feature at the time of execution of getting [ confused ]-izing application, 
i.e., static analyses, will be called. 

Since it may become clear that the predicate which returns the always same truth value in many 
trial runs is an ambiguous P T (P F ) predicate, attention of the reverse engineer to all the predicates 
that return such a truth value is urged to a confusion release machine. Although the confusion 
release machine cannot replace such a predicate recklessly by truth (imitation), this is because 
doing so may be too dangerous. Although many applications contain the "true" predicate which 
inspects the conditions generated only under an exceptional situation, probably, for a confusion 
release machine, such application seems to operate similarly to an ambiguous predicate, for 
example, pif (LeapYear) - please consider ... 

Static analyses can still be used also for evaluation. When the potential ambiguous predicate (for 
example, P T ) within the program M is already identified, that value (truth) is presumed and 
version M' of the getting [ confused ]-izing program which the above-mentioned ambiguous 
predicate is this point estimate, and has already been replaced is created. M and M' is performed 
in parallel to the same input, and in order to check that M and M' produces the same output, 
comparison is performed to the next. When these outputs are the same, it is possible to conclude 
that the predicate was a part of bow gas which is not true application as shown in drawing 30 . 

It must be secured that the selected input covers appropriately all the paths in the above- 
mentioned program. This will be difficult when similarly the above-mentioned program includes 
the path (if (Leap Year) ...) which are not rare. When it is dramatically difficult to generate much 
right inputs / output data and especially the internal structure of application is strange, or this is 
dramatically difficult when an input is performed through a complicated (it is alike occasionally, 
it carries out and applied to a Java program — as) graphical user interface. 

In order to prevent discernment by static analyses, a confusion-ized machine may choose from 
the conversion which inserts a P T predicate or a P F predicate so that priority may be given to the 
conversion which inserts a P(as [ show / in drawing 1 1 b ]) ' predicate. 

The countermeasures over static analyses in which another adoption is possible are some 
predicates' being decoded simultaneously, and designing an ambiguous predicate so that there 
may be nothing, if it is ******. One of the methods for performing this is giving side effects to 
an ambiguous predicate. In the following example, a confusion-ized machine determines that 
sentence Si and S2 must perform only the always same number of times (a kind of static flow 
analysis). These sentences are confusion-ized by introducing the ambiguous predicate which is a 
call to function Qi and function Q2. Function Qi and function Q2 fluctuate a global variable. 

I =T => | 



S 



int k=0 



S 2 ; bool Q i (x) { 

} k+"2 3 1 ; return (P T i)} 

bool Q 2 (x) { 
k-=2 31 ; return (P T ,)} 

{ 

if (Q i (j) T ) Si ; 



if (a, Ck) T ) S 2 ; 
} 

k will overflow, when a confusion release machine tends to replace one predicate (they are not 
both) by truth. As the result, the program by which confusion release was carried out will be 
completed by an error condition. 

9.6 Evaluation by data flow analysis Confusion release is similar to code optimization various 
type, if (False) ~ it is the dead code (dead code) deletion to remove ... 

It is the code hoisting (code hoisting) to move the same code from if sentence brunch (for 
example, Si and So 1 in drawing .28) , and these are general code optimization techniques. 

If an ambiguous structure finishes being identified, it will become possible to try evaluation of 
the structure. In a simple example, it comes out enough by the constant propagation which uses 
an arrival definition data flow analysis (reaching definition data-flow analysis), and a certain 
thing is possible. x=5;...;y=7;...;if(x*x==(7*y*y=l).... 

9.7 Evaluation by theorem proving When not powerful as enough for a data flow analysis to 
decode an ambiguous predicate, it is possible to try for a confusion release machine to use 
theorem proving. It is dependent on the capability of the theorem proof program of a state of the 
art (a check is difficult), and the complexity of a theorem with required being proved whether 
this is unable to be possible. The theorem (for example, x 2 (x+l) 2 =0 (mod 4)) which can be 
proved by induction with a natural thing is in the range of access of the present enough theorem 
proof program. 

In order to make a matter still more difficult, it is possible to use the theorem in which a known 
proof about the theorem for which it is known that proof is difficult, or it does not exist. In the 
following example, probably, it must prove that the bow gas loop (bogus loop) is always 
completed, in order to investigate that a confusion release machine is the code (live code) in 
which S2 was useful. 



_ T = 



= > 



s 



Si ; 



S 



n 



random ( 1, 2 3 2 ) ; 



do 



n = (<nX2)!=0)?3*n+l:n/2 



while Cn>l); 



S 2 ; 



This is known as a Collatz problem. It is guessed that the above-mentioned loop will always be 
completed. Although the known antecedent basis of this guess does not exist, it is known that 
that code will be completed about all the numbers to 7*1 0 11 . Therefore, this confusion-izing is 
safe (similarly the confusion-ized original code completely operates), and it is difficult to 
perform confusion release. 

9.8 Confusion release and partial evaluation Confusion release is similar also to partial 
evaluation further. A partial evaluation machine divides a program into two portions, i.e., the 
static portion by which precomputation can be carried out with a partial evaluation machine, and 
the dynamic portion performed at the time of execution. Probably, a dynamic portion is 
equivalent to the original program which is not confusion-ized. A static portion is equivalent to a 
bow gas inner program, when identified, it is this bow gas inner program at the confusion release 
time, and it can be evaluated and removed. 

Partial evaluation tends to be influenced by aliasing like all other static internal procedure mode 
analytic methods. Therefore, the same prevention conversion as the prevention conversion which 
made reference in relation to the slicing is applied also to partial evaluation. 

10. Confusion-ized algorithm Next, based on the confusion-ized machine architecture of the 
section 3, the definition of the confusion-ized quality of the section 5, and explanation of various 
confusion-ized conversion of the section 6 to the section 9, furthermore it is based on one of the 
enforcement aspects of this invention, a detailed algorithm is explained. 

The loop of the highest level of a confusion-ized tool can have the following general structure. 
WHILE NOT Done(A) DO S: =SelectCode (A); T:=SelectTransform (S); A:=Apply(T, S);END; 
SelectCode returns the following source-code object which should be confusion-ized. 
SelectTransform returns the conversion which must be used in order to confusion-ize this 
specific source-code object. Apply applies conversion to a source-code object, and updates 
application according to it. Done determines the time of finishing reaching confusion-ization of a 
necessary level. It will depend for the complexity of these functions on the sophistication of a 
confusion-ized tool. It is possible to terminate a loop, when SelectCode and SelectTransform 
return random source-code object / conversion simply and the size of application crosses the 
limit where Done is specific as a result of simple determining what number a figure represents. 



As for such operation, usual is insufficient. 

The algorithm 1 gives description of a code confusion-ized tool including the selection operation 
and end operation which were refined still farther. In one of the enforcement aspects, this 
algorithm uses some data structures and such a data structure is built by the algorithms 5, 6, and 
7. 

When it is Ps about each source-code object S, Ps (S) is the language structure set which the 
programmer used by S. It is used in order that Ps (S) may discover the suitable confusion-ized 
conversion about S. 

When it is A about each source-code object S, A(S) = {Ti — >Vi; ...;T n =->V n } is mapping to 
value V[ from conversion Ti ] i, and describes how it is appropriate to apply Ti to S. Since specific 
conversion introduces the new code "is unnatural and has" this idea for S, I hear that such 
conversion may be unsuitable about the specific source-code object S, and in S, a certain new 
code of this looks the not the best, therefore it will be easy to discover it to a reverse engineer. 

Probably, the more the code introduced by conversion T ; suits fitness more, the more felicity 
value (appropriateness value) Vi is large. 

When it is I about each source-code object S, I (S) is a confusion-ized priority of S. It is 
described whether it is important only for which that I (S) confusion-izes the contents of S. 

Probably I (S) is HIGH when S contains important trade secrets, and, on the other hand, it is 

mainly "bread and butter." 

I (S) will be LOW when a code is included. 

When it is R about each routine M, R (M) is an execution time rank of M. 

In order that much time may perform M rather than which other routines, when being spent, it is 

R(M)=1. 

The primary input to the algorithm 1 is set {Ti;T2 of the application A and confusion-ized 
conversion.; ... It is}. Further, this algorithm also requires the information about each conversion, 
and requires three (numerical value is returned although it is the same as that of function of same 
name in section 5) quality-functions T res (S), T pot (S), T cost (S), and function P t especially. 
When applied to the source-code object S, T res (S) returns the measure of the elasticity (that is, 
which does T bear appropriately at the attack from an automatic confusion release machine?) of 
the conversion T. 

When applied to the source-code object S, T pot (S) returns the measure of the effect (that is, after 
being confusion-ized by T, does human being understand however difficult S?) of the conversion 
T. 

Tcost (S) returns the measure of the execution time added to S by T, and a space penalty. 

P t carries out the map of each conversion T to the set of the language structure which T will add 

to application. 

The point 3 loads the application which should be confusion-ized from the point 1 of the 
algorithm 1, and a suitable in-house-data structure is built. The point 4 builds Ps (S), A (S), I (S), 
and R (M). The point 5 applies confusion-ized conversion until it finishes reaching a necessary 
confusion-ized level, or until the maximum execution time penalty is exceeded. Finally, 



application A' with the new point 6 is rewritten. 
Algorithm 1 (formation of code confusion) 

Input: Application A C1;C2; which comprises an a source code or an object code file. ... 

b) Standard library L1;L2; defined by language ... 

c) a confusion-ized conversion set — {-- T1;T2; ...}. 

d) Mapping Pt which gives the language structure set which T will add to application about each 
of the conversion T. 

e) Three functions T res (S) expressing the quality of the conversion T to the source-code object S, 

1 pot 

(S), T cost (S). 

f) Input data set I={I1;I2 to A; ...}. 

g) Two numerical value AcceptCost>0 and ReqObf>0. AcceptCost is the measure of the greatest 
additional execution time / space penalty that a user will accept. ReqObf is the measure of the 
quantity of confusion-izing demanded by the user. 

Output: Getting [ confused ]-izing application A' which comprises a source code or an object 
code file. 

1. application Ci;C2; which should be confusion-ized — load ... Confusion-ized machine, it is 
possible to load (a) source code file, In this case, it is ** [ probably a confusion-ized machine 
must contain the perfect compiler front end which conducts a lexical analysis, syntax analysis, 
and a semantic analysis ] (purely the powerless confusion-ized machine which carries out self- 
limitation only to syntax conversion), processing without a semantic analysis is possible ~ or It 
is possible to load (b) object code file, and when an object code holds most or all of information 
in a source code (like [ Java class file / of a case ]), this gentleman method is preferred. 

2. library code file L1;L2; referred to directly or indirectly by application ~ load ... 

3. Build the internal expression of application. It depends for selection of an internal expression 
on the structure of the source language which a confusion-ized machine uses, and the complexity 
of conversion. A typical data structure set may contain the following. 

(a) The control flow graph about each routine in A. 

(b) The call graph about the routine in A. 

(c) The succession graph about the class in A. 

4. It is [ use) and ] I (S) about mapping R(M) and the P S (S) (algorithm 5. 
Use) is built for the (algorithm 6 and use) is built for the A(S) (algorithm 7. 

5. Apply confusion-ized conversion to application. In each step, the suitable conversion T which 
should be applied to the source-code objects S and S which should be confusion-ized is chosen. 
This process is completed, when a necessary confusion-ized level is reached, or when 
permissible execution time cost is exceeded. 

REPEAT S :=SelectCode(I); 
T :=SelectTransform(S,A); 

T is applied to S and the suitable data structure from the point 3 is updated.; 
UNTIL Done(ReqObf,AcceptCost,S,T,I). 

6. Reconstruct getting [ confused ]-izing source code BUJIEKKUTO in new getting [ confused ]- 
izing application A'. 

Algorithm 2 (SelectCode) 

Input: Confusion-ized priority mapping as calculated by the algorithm 6. 
Output: Source-code object S. 

I carries out the map of each source-code object S to I (S), and it is this I (S). 

It is that measure only with which [ important ] to confusion-ize ** and S. In order to choose the 



following source-code object which should be carried out [ **** ]-izing, I is able to be processed 
as a priority encoder. In other words, S is chosen so that I (S) may be maximized. 
Algorithm 3 (SelectTransform) 
Input: a source-code object S. 

b) Felicity mapping A as calculated by the algorithm 7. 

output: — the conversion T — in order to choose the most suitable conversion for applying to a 
certain specific source-code object S, the heuristics (heuristics) of the arbitrary number is usable. 
However, there are two important problems which should be taken into consideration. The 
conversion chosen as the 1st must be mixed with the remaining portion and nature of a code in S. 
This is A (S). 

Handling is possible by giving priority to the conversion which is alike, sets and has a high 
felicity value. To the 2nd, it is high, "only value of balancing expenses (bang-for-the-buck) 
" — it is desirable to give priority to the conversion to obtain (that is, confusion-ization of a high 
level is obtained by a low execution time penalty). This is realized by choosing the conversion 
which minimizes cost at the same time it maximizes effect and elasticity. Such heuristics is 
incorporated in following code and wl in this code, w2, and w3 are implementation definition 
constants. 

T — The conversion T is returned so that >V may be in A (S), and 
(wl% ot t(S)+w2*T res (S)+W3*V)/T cost (S) is maximized. 
Algorithm 4 (Done) 

The residual level of input aReqObf and confusion-izing. 

b) The permissible execution time penalty which AcceptCost(s) and remains. 

c) Source-code object S. 

d) Conversion T. 

e) Confusion-ized priority mapping I. 

Output: ReqObf of which renewal of a was done. 

b) Updated AcceptCost. 

c) Updated confusion-ized priority mapping I. 

d) The Boolean returned value which is truth when the terminating condition is reached. 

A Done function fills two purposes. As for this function, the source-code object S has finished 
being confusion-ized. 

And in order to make the fact that the reduced priority value must be received reflect, priority- 
encoder I is updated. 

This reduction is based on the combination of the elasticity of conversion, and effect. Further, 

Done updates ReqObf and AcceptCost and investigates whether the terminating condition is 

reached, wl, w2, w3, and w4 are implementation definition constants. 

I. (S): =1. (S)-. (w 2 T pos .) (S) - +w 2 T res (S);ReqObf:=ReqObf-(w 2 T pos (S)+w 2 T res (S)); 

AcceptCost:=AcceptCost-T cost (S); . RETURN AcceptCost - < - =0 OR ReqObf<=0. algorithm 

5 (pragmatic information) 

Input a application A. 

b) Input data set I={I1;I2 to A; ...}. 

Output: MABBINGUR (M) which gives the execution time rank of M about each routine M in 
aA. 

b) Mapping Ps (S) which gives the set of the language structure used by S about each source- 
code object S in A. 

Pragmatic information is calculated. It will be used in order that this information may choose the 



proper type of the information about each individual source-code object. 

1 . Calculate dynamic pragmatic information (that is, application is performed under the profiler 
based on input data set I provided by the user). R (M) and (the execution time rank of M) about 
each routine/basic block which show where application spends the greater part of the time are 
calculated. 

2. Calculate static pragmatic information Ps (S). Ps (S) provides the statistics about the kind of 
language structure which the programmer used by S. 

FOR S: Set of the operator which each source-code object 0:=S in =A DO uses; 

C: = set of the high level language structures (a WHILE sentence, an exception, a thread, etc.) 

which S uses; 

L: Set of the library class / routine which =S refers to; 

Ps(S)-OUCUL; 

END FOR. 

Algorithm 6 (confusion-ized priority) 

Input: a application A. 

b) The rank of R (M) and M. 

Mapping I (S) which gives the confusion-ized priority of S about each source-code object S of 
output A. 

A user is able to provide I (S) clearly, or it is possible to be calculated using the heuristics based 
on the static data collected with the algorithm 5. The usable heuristics may be as follows. 

1. Make I (M) in inverse proportion about the arbitrary routines M of A to the rank of M, i.e., R, 
(M). That is, this idea is "when spending much time in performing a routine, ** and M will 
probably be the important procedure which must be confusion-ized severely." 

2. Let I (S) be the complexity of S as one of the software complexity measures of the table 1 
defines. Also in this case, similarly, rather than the case where the direction of a complicated 
code is a simple code, I hear that intuitive (it may be wrong) discernment has a high possibility 
that important trade secrets are included, and it has it. 

Algorithm 7 (felicity of confusion-izing) 
Input: a application A. 

b) Mapping Pt which gives the set of the language structure which T will add to application 
about each of the conversion T. 

c) Mapping Ps (S) which gives the set of the language structure used by S about each source- 
code object S of A. 

Output: Mapping A (S) which gives the felicity of T to S about each source-code object S of A, 
and each conversion T. 

The felicity set A (S) is calculated about each source-code object S. Mapping is fundamentally 

based on the static pragmatic information calculated with the algorithm 5. 

FOR S: Degree of the similarity of a between to each source-code object FOR T:= each 

conversion DO V:=Pt (T) and Ps (S) in =A DO; 

A(S):=A(S)U{T->V}; 

An END FOREND FORI 1 . outline and consideration this invention person recognizes that 
operating in a different form could probably permit the program with an original getting [ 
confused ]-izing program in many situations. In particular, most confusion-ized conversion of 
this invention makes working speed of a target program slow compared with the original 
program, or it enlarges program size. In this invention, when, and a target program is even 



enabled to have different side effects from an original program or an original program is 
completed by error condition, a target program is even enabled not to end. The only necessary 
condition of confusion-ized conversion of this invention is that the operation (operation which is 
experienced by the user) which can observe these two programs must only be the same. 
It is a fresh very stimulative idea to make possible such weak identity between an original 
program and a getting [ confused ]-izing program. Although various conversion is provided and 
mentioned above, other various conversion will be clear to a person skilled in the art, and it is 
possible to be used in order to realize confusion-ization for the software security enhancement by 
this invention. 

In order to discover the conversion which is not yet known, a possibility that future various 
surveillance study will be performed is large. It is expected that surveillance study of the next 
field will be performed especially. 

1 . New confusion-ized conversion should be discovered. 

2. The correlation between various conversion and ordering should be studied. Ordering of an 
optimization conversion sequence of this is the same as that of the research in code optimization 
which is an always difficult problem. 

3. The relation between effect and cost should be studied. Knowing which conversion will give 
only the best "value of balancing expenses" (namely, effect highest, by the minimum execution 
overhead) about the code of each kind is called for. 

Please refer to drawing 3 1, in order to survey all the above-mentioned conversion. Please refer to 
drawing 32, in order to survey the above-mentioned ambiguous structure. However, this 
invention must not be limited to above-mentioned typical conversion and ambiguous structure. 
11.1 Confusion-ized capability Encryption and program confusion-ization are extremely similar 
mutually. It not only concealing information from the eyes of human beings who try to spy out a 
secret, but performing this concealment in limited time has intention of these both. The 
enciphered document has the limited storage life. Only in the limitation which does not make it 
possible to decode frequently the message about the key length as whom progress of the 
processing speed of hardware was chosen, the enciphered document is [ in / the limitation to 
which the enciphered program itself is equal to the attack ] only safe. It is applied that it is the 
same also as getting [ confused ]-izing application. Only in the limitation by which the confusion 
release machine powerful enough is not yet built, getting [ confused ]-izing application is only 
safe. 

Probably, this is not a problem when evolving application, as long as the time between releases is 
shorter than the time which a confusion release machine takes for a confusion-ized machine to 
catch up. The application is already outdated by the time of becoming possible to carry out 
confusion release of the application automatically, therefore, probably, it has been no longer an 
object of a competition partner's concern, even if a confusion release machine catches up with a 
confusion-ized machine. 

However, when application contains the trade secrets considered to continue over a some times 
release, such trade secrets must be protected by means other than confusion-izing. Although the 
partial server side execution (drawing 2 . (b)) is the obvious selection, there is a fault that the 
execution speed of application serves as a low speed, or execution becomes impossible (when 
network connection is downed). 



11.2 Use of everything but confusion-izing It is interesting to point out that other potential 
confusion-ized uses may exist in addition to the confusion-ized use as above-mentioned. One 
possibility is using confusion-ization in order to pursue the pirate edition manufacturing-and- 
selling contractor of software. For example, a vendor creates the new getting [ confused ]-izing 
version of its application for each new customer (by introducing a random nature element into a 
SelectTransform algorithm (algorithm 3)). A getting [ confused ]-izing version which is different 
to each of the same application is able to be generated. Different seed to a random number 
generator holds record of the customer who produces a separate version and who sold each 
version. Probably, this will only be appropriate only when the application is sold and rationed 
through the network. When a vendor discovers that the pirate edition of its application is sold, it 
being required for this vendor is only getting the copy of that pirate edition version and 
discovering who having purchased that original application, comparing it with a database. In 
practice, it is unnecessary to save Coby of all the sold getting [ confused ]-izing versions. It is 
enough just to save the sold random number seed. 

The pirate edition manufacturing-and-selling contractor of software may use confusion-ization 
(inaccurate). Since the Java confusion-ized machine outlined on these Descriptions operates on 
the level of a byte code, what prevents that a pirate edition manufacturing-and-selling contractor 
performs confusion-ization to the Java application purchased lawfully does not have anything. 
After that, this getting [ confused ]-izing version is able to be resold. When a pirate edition 
manufacturing-and-selling contractor faces a lawsuit, it is also possible to claim that they sell 
actually the version which he does not resell the application purchased first (the codes 
completely differ despite the join office!), and redesigned lawfully. 

Conclusion In conclusion, this invention provides the method and equipment which are realized 
on [ for blocking, even if the reverse engineering of software is prevented or it is small ] a 
computer. This can realize execution time or program size as a sacrifice, and on a level with a 
detailed program changed as the result, although it operates in a different form, it is thought that 
the method of this invention brings about high usefulness in a suitable situation. In one of the 
enforcement aspects, the changed program is seen with a non-changing program and carries out 
the same operation in a top. Therefore, this invention makes possible such weak identity between 
an original program and a getting [ confused ]-izing program. 

although the indication of this invention has been performed mainly in the context called 
inhibition of the reverse engineering of software — the water marking (watermarking) of a 
software object (application is included) — other applications [ like ] are assumed. This uses 
characteristic character potentially [ all single confusion-ized procedure ]. A vendor will create a 
separately different getting [ confused ]-izing version to each customer of an application sale 
place. When a pirate edition copy is discovered, the vendor can only compare the pirate edition 
version with an original confusion-ized information database, and can pursue original 
application. 

The specific confusion-ized conversion currently explained in this Description is not 
comprehensive. It may be used in the new confusion-ized tool architecture of this invention, 
providing another confusion-ization of a type. 

publicly known in the above-mentioned explanation — etc. — although the element or integer 
which has **** has been mentioned, ****, such as having carried out like this, is contained in 



this invention as explained separately above. 

Although this invention has been explained in the form of a mere example with reference to 
specific enforcement aspect, it must be understood that change and an improvement are able to 
be made without deviating from the range of this invention. 



[Translation done.] 
* NOTICES * 

JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 
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[Drawing 10] 

{ int v, a=5; b=6; 
v =11 =a + b; 



if (b > 6) 



T 



FIG. 9 



if (random (1,5)<0) F .. 



int v, a=5; b=6; 

if(...) ... 

: (b is unchanged) 

if (b < 7) T a++1 

v =11 = (a>5) 7v=b=b; v=b 
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i=1 i+1j HOO; 

while (1<100) { t while {(i<1 00)// (j+1)* (j + 1)%A==0) T ) { 

) "++; 

' j = H+3; 

(c) 1 (d) 
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class C { 

method M1 (T1 a) { 
cM1. eM1. 

3 

method M2(T1 b;T2c){ 



} 



S k1 S k2 
1 m 



} 



{ Cx=newC; 
x.M1(a);x.M2(b, c);} 
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class C { 
method m (int x) 
{Si ...S k } 

} 

{ Cx = newC; 
x.m(8); ... x.m(7); 

} 



class C { 
method M (Ti a; T2 c; int V} { 
if (V==p> {S ! ;..,S k ;} 
else {Sf;...s^;} 

} 

} 

{ C'x=newC'; 
x.M{a, c, V =p ); 
x.M(b, c,V = 9);} 
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class C1 { 
method m (int x) 

{S* ;...S* } 
method ml (intx) 

{S? ;...S c n } 

} 

class 02 inherits C1 { 
method M (int x) 



} 



{S°--..Sg } 



{ C1x; 

if (P7) x=new C1 else x=new C2; 
x.m(5); x.m1(7); 

\ 
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FIG. 20a 

for(I=1, I<=n, I+=64) 

for(i=1,i<=n,i++) * _ for(J=1,J<=n,J+=64) 

for (j=1 , j<=n lor (i=Ij<=miri{I+63,n),i++) 

a[1,j]=b0,i3 ' for (LJj<=min(J+65,n),j++) 

FIG. 20b for (i=2,k(n-2),i+=2) { 

x a[i]+=n[i-1J=a[i+1]; 

for(i=2,i<(n-1) J i++) 1^ a[i+1] +=a[i]=a[i+2j; 



FIG. 20c 



a[i]+=a[1-i]==[i+1] ^ }; 

i1(((n-2)%2)==1) 
x[n-1]+= a[n-2]=a[n] 



for(i=1,kn,i++){ t for(i=1,i<n,i++) 

a[i]+=c; * > a[i]+=c; 

x[i+1]=d+x[i+1j=a[i] * for (1=1, kn, 

} x[i+i] <d+x[i+1]=a[ij 
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(1) boolA,B,C; 

(2) A = True; 

(3) B = False 

(4) C = False 

(5) C = A&B 
C = A&B 
C = A I B; 
if (A)...; 
if(B) 



(6) 
(?) 
(8) 
(9) 

(10) if (C) 



0' 

(2' 
(3' 
(4' 
(5' 
(6' 

<? 

(8* 
(9- 



short a1,a2,b1,b2,c1,c2; 
a1=0; a2=1; 
b1=0; b2=0; 
d=1;c2=1; 

x=AND[2*a1+a2,2*b1+b2]; d=x/2; c2=x%2; 
d=(a1 A a2)&(b1 A b2);c2=0 
x=OR[2*a1+a2,2*b1+b2]; d=x/2; c2=x%2; 
x=2*a1+a2; if «x=1)ll (x=2) 
if (b1 A b2)...; 



(10'} if (VAL[c1,c2]) 
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String G (int n) { 
int i=0,k; 
String B; 
while (i) { 



L1: 


if (n= 


=1){S[i++]="A";k=0;goto L6); 


12: 


if(n= 


-2) {S[i + -f]=»B";k= -2 ;goto L6}; 


L3: 


if (n= 


=3) {S[i++]= !, C";goto L8}; 


L4: 


if (n= 


=4) {S[i++]="K";goto L9}; 


L5: 


if (n= 


=5) {S[i++]-C";goto L11J; 



if (n>12) gotoLI; 



L6: if (k++<=2) {S[i++]="A";goto L6} else goto L8; 

L8: return S; 

L9: S[i++]="C";gotoL10; 

L10: S[i++]="B"; goto L8: 

L11: S[i++]="C"; goto L12; 

L12; gotoUO; 

} 

} 

FIG. 22 

[Drawing 23] 

FIG. 23a 

Z(X + r,Y) = 2 32 - Y + {r + X) = Z(X,Y) + r 
Z(X,Y + r) = 2 32 ■ (Y + r) + X = Z(X,Y) + r • 2 32 
Z(X-r.Y) =2 32 Y + X + r =Z(X,Y) + (r- 1) • X 
Z(X,Y • r) = 2 32 • Y - r + X = Z(X,Y) + (r - 1 ) - 2 32 • Y 
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(1) int X=45, Y=95; (1 ') long Z=1 677590661 19551045; 

(2) X += 5; T (2 1 ) Z += 5; 

(3) Y += 1 1 ; (21) Z += 47244640256; 

(4) X*=c; ' ~^ (4') 2 +=(C-1)*(Z& 4294967295); 

(5) Y * = d; (5') Z += (d-1)* (Z & 18446744069414584320); 



(1) int A[9]; 

(2) A[i] = ...; 



(3) intB[8] t C[19J; 

(4) B[i] = ...; 

(5) C[i] = ...; 

(6) int D[9] ^> 

(7) for(i=o;i<=B;i++) 

D[i]=2*D[i+1j; 



(8) «ntE[2,2]; 

(9) for{i=Q;i<=2;i ++) 

for{j=0;i<=2;i++) 
swap(E(i,j], EQ,i3); 



(1') intA1[4],A2[4]; 
(2') if((i%2)==0)A1[i/2]=... 
else A2[tf2]=...; 

»■ * 

(3') int BC[20]; 
(4') BC[3*i] = ...; 
(5'} BC[i/2*3+1+i%2] = ...; 
(6') int D1 [1,4]; 
(7*) for(j=0;j<=1;j++) 
for(k=0;k<=4;k++) 
if (k==4) 

D1G,k]=2*D1[j + 1,0]; 
else 

D1[j,k]=2*D1[j r k+1]; 

(8') intE1[8] 

(9') for(i=0;1<=8;i++) 

swap(E[i], E[3=(i%3)+i/3]); 



FIG. 24a 



[Drawing 24] 
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Node g, h; 

method P(...,Nodef){ 
/ * 1 * / g = g.MoveQ; 

h = h.Move(); 
/ * 2 */ h = h.insert(new Node); 

/*3 W x.R(...,f.MoveO); 
/*4 */ if(f==g) ? ... 
/*5 ./ if{g=h)' = ... 

/.6 J f.Token=Fa!se; 

g. Token=True; 

/*7 */ if(f.Token)?... 

/ * 8 */ f.Token=True; 

h. Token=False; 



} 



/.9 */ if (f.Token) T .. 
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program M; 




program M'; 


if (p t ) ... 




if (True) ... 


endM, 




end M'. 
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thread S { 

intR; 
• while (1) { 

R = random (1,C); 

X = R*R; 

sleep(3); 

} 

} 



thread T { 
int R; 
while (i) { 
R = random(1,C); 
X = 7*R*R; 
sieep(2); 
X*=X; 
sleep(5); 



} 



} 



int X, Y; 

const C = sqrt(maxintyiO; 
main () { 
S.runQ; T.run(); 



if ((Y-1)==X) F <= 



} 
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if (P 7 ) 



'1 



else 
if (QT) 
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else 
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=> if (True) 



Si 



if (P 7 ) 
else 

(C) ; (d) 
if (True) 
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%^-i?timb< a^mxm%x%z>£ oK-t^^t^m/vx\^, tbffls&v 
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ssst 9 a#p-c ^ 5 t ^m-r s r t t -r 5 y ^- * = >- r ( # ^ 
7 hv^TJLmn&m^mm^x^z 



o (James R. Gosler, Software protection: Myth or reality? In CRYPTO' 85-- 
Advances in Cryptology, pages 140-157, 1985^8.^) „ 

SfcS^r^n-^-d, tv ^(Dr-f v tr-^? iK3g-tH\ 

ttLZZW— t-*^5g5i tXh6o *H-TSi, a-f Sr^D^a^ 
g # T * -fe * T* 1 5 i £ LT& < , if L 5fc@*NH»«? S««:3t& o T 
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b^o^blzh^o n&faimmz, Tr/y^-i's:'* 2 -t%t>h 



-CfT^fc|x5S-a-i'»^-1l^-r5„ r<Dj;3&->*X.M± s Herzberg (Amir Her 
zberg and Shlomit S. Pinter. Public protection of software. ACM Transacti 
ons on Computer Systems, 5(4) : 371-393, 1987^11.^) SOTilhelm (Uwe G. W 
llhelm. Cryptographically protected objects. http://lseww. epfl. ch/-wi 
lhelm/CryPO. html. 1 9 9 7) 1-125* £tVt^ So =*— Vtf&mtWI&'f 7 
1)?IC£<9 yy bVx-TftXmft£tlZ>W& (Java bytecodes^ft bM%^Z 5 
XhZXoK) , #^as*B«*a- KtflfS Lfa y/M i i ftoiaK 
"TIB fc ft 5. 

b\X Java/^ ha-K^H^TtfJ^-x^y^- KiiagR-rs^^^ r-^V* 
vvr @ fjcoT^U ^— >3 vco^— <rj-?=i— Hv^-^g >-£fft&-f 5-<< ^© 
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XbK, *j-JS1-5^-v : 3 ytffcmtSti&Z. b\ct£Z>tz.?>o Q ^-x^f/a-K 

•f^L<^5 0 ^-^-f^- K^e^-rsjiT'omiittfi^^i-ii-ro Raj® ft 



a * a* a ft « <r> r -? v —f- ft, m 7L tfa 5 tc^ * ft r v > 5 * 5 4 = - k 

^ffittfCftlll-T'feSfcWcDTKytCt oTft5^{ca^L»l^®T*fcST7 f !J 
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3. javajgS/fbg&co^tf 

^■T/VT-J (a*h) SrilKI"^ Kava!4, itSX«fpiaK)lr#,B8^*^^C& 
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t * 5 J; 5 (cjiK-r 3 r t ^-e 1 5. 



®»i (iiaft;^*) 

p- t ->p' zmmmummtL, rrKev^ HT©i(Wfcti4< 
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*l5„ rftti-f&fc^ ^--If^^cgij^^g^L^V^^^, P' P^s 



^p^7A^#^^/-cV^^'7'^*^o ^ ^cy/<"X^vv :; ^Ttri•oT 

5. jSSLft^i&cDffHE 



-25- 



5. 1 %)jj<DRg. 



o 

8 7tt, E (X) *Sy7h^3iTflffiSSs(SXC0«*S14-CS>!3, F^HScXiiT? 
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tnmTT^m<D^%'\t<DRgt t LTft^ £ft£ £ b 



IS-f:: ttioT3j?^*jSSLS*5«nfc*f Sr-t-5ii^lwSft*« s &So iff 
S : 

£S2 (3E»iasb^j) T^iMtta, p- t ->p' i;y-^c^A 

SrSlT'p^iP' t^i-S<t 5 {-1"5o E (P) £ N E]7»y MJ s^eo 
1 o ic J; 9 £J| £ ft 3 « 9 © P <Dffl&& t -f Z> 0 
T pot (P) t*bt7n^7APCft ST©3b;*jB:, T#P©«*H4«:£ 

Tpot (P) def =E (P' ) /E (P) -1 

tLTSfg£ft3 0 t», T pot (p) >o-e*>5»g\ ®)jjh&umtmm~? 

ioiit*sv^ft, 3£gffi (fi, <f», iff) ±-csb*^MS$ft5. 

J^T© r b Srff * 5 - t ^^IT*fc5 0 

- /n^y^X ( Ul ) £#«:Jf:*:3*, trLV^ ^.x&Ovtfft 
(u a 7 ) £^A-f3, 

- ffui^fg (u 2 ) ^AV^H^RWu-^y^^y^hv^ 
b<D^XTj y?\^<'i- (u 3 ) its, 

- yyy^l^twf (u 5 ) S^y^K^v^^v^S^JStt 
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(u d 7 ) tm±mt%o 

- (u b - c 7 ) -5„ 

- g|tffl»«tt (u 4 ) £iS*£*5 0 



5. 2 

T pot (P) $rif^:$*5rt^HJ t*T/w-efc5t®fc>tb5„ M 



mainO { mainO { 

SI; SI; 

S2; T = > if (5-2) SI; 

S2;} 

if (1>2) S2; 

} 
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T©?MLfMPt?rgftft-r5»(^Si: $nSf^*i4, T©f5ffl©H»i: LTflJ 

Til, ^^M»7n-^77 (CFG) ©f-X*/ny^tff^Xff 
TZmmUftm&tL, P = T = >P' ftV-Ts-fv? 

7iP?rS#^o^7AP' fc3E*-t-SJ;5{::-f-5 0 T res (p) /p^7 
AP|:»t5T©»iM-eJi.5. T res (P) (4, Ptfsp' ^&H4mE$n«« 

^res (T DEoti:fusca1 . 0:r e ff ort > T programmer e ff ort ) "C$> (3 



5. 3 ^a^hO^S 
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©*[4, 3^hSr4,fSBffi £«, ftflu ifcflO _hT*#igU ^©5^® 

£jft5 TSflSafttU T cost (P) e {jfe*k ftff. 

SMB. «»} i&SfcOiU P' cDftfi^Pi-^O (1) fl#V^jg«:&® 
ttS»^T CMt (P) =«»;P' ©*ff^P±9t>0 (n) fl#V'JHKfr& 
®i-t-5#S\ T cost (P) =$*;P>ltP' ©SWfi^PiUtO (n p ) 
fi^^*iC^St-r5«^ T cost (P) =*«;X J &5-C*lt*b«, T cost 

(p) =ss# er&^p' w^^Piofeffisasat^^^Sfii^st-f-s 
^KffiHrtaiiBSwa^ has, z oimmmmz. zii&^t \z->gm-r 

^SWf-$ k^iU^* FtttSi ifcftS. ffi©ffijffic9ftl^^!9, 
5. 4 ft«,Rfi 
«TWfT qual (P) ft, T©3itfj, ^ttfttfa* h 



*tLT€«$tlS : T qual (P) = (T pot (P) , T res (P) , T cost (P 
) ) „ 

5. 5 wrr?h3E& 

STLV^^o^TiK-rSifri^ 0iRffi;rema£V^ofcmfi ; ©Java?ML'fb^ 
}Cftffl^-efe5 h U fT/VWfT? h^&fCOV^fBlW-.E'CVKo (Hans Pete 

r Van Vliet. Crema Java^ESUbtljo http. //web. inter, nl. net/users/H. P. va 

n.Vliet/crema, html, 1 9 9 6^U) „ S 1 CD^ifete:, Java^ 5 * 7 r -( /H*5 
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6. fM«i& 



6. 1 ^F?HW?ftj£!& 
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m (i-ftfc*>, gffi, sfiB, s^) ±-eaijsi-5o 

p^ *(omm>mum&x*%\bhx^z>m&, pi^^x^mmxh^ a 

Ps6Spfc*svvco*aK:, ft (K) (cW«-f^^a-P F p (P T P ) P 
„ HUte, H#i t fb*i#5&B&£*fc>U till, ftLttf)ft5-iO^ 

6. i. i hv ¥T/uRxfm^w&^yxV7? h 
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16«rjKSti-5fl1B-e*)5java™©J; 5 ftfllSt-o^-cs*, a^S^RItfgffett 
&££Si8&ft5o *#fi*^H:, (a, b) a • • • bcDfSHrtw 

io©SifeSrMi-5^^5 <J Hfrefc3intV s [l, 5] -yVW (1,5) 
-C*>3. aortic, ^^S^PJ««ttlsl«(-;SSL'ft:#|it^lrT'fc5 0 & 

5. 

tUME&H:, i!fe03o©*f^y MAS : ffcfofc, *^©ffff i^-¥L&^ 

, Xi4*©ftM7n-tt*5r^*1-5^^(*^7"yrx^fccD^A1-5o 
6 . 2 . l fyFa- KX»MM# =< - K©ff A 

0 1 1 rp(Dm*-/v y?S = S 1 S n %^m.-tZ>o BIl 1 a fflt 
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IC, icD^2cD^C0 2o<D^/ c c5®SWt^r^-v ; 3 VS a &t>*S b £ffr&1-5 
^<<iltr„ S a WS b lt, S 2 «^C»ttft!i5 O B S ^ ftt y h&M 
ffl-TSr tKliotfP^SnSr. fcfcfcS. Sot, S/^i^sTKio 

t, s a s.t^s b ^n^{cnn:aiiB*r*fci-r tttESwe-mftv^ 7 
y * -r ^ -e s a &t>* s h (D m x~<DmR &fr& b±t> \cmm p 7 <H£ffl -r 5 , 

lllcll, gl lb ta©LTV^S^\ S b rt(-/<^'4r*A-r5o 
6. 2. 2 A— :/|?fr»i£3g 

if $ * V ^ P T X tt P F 3£f§ Tvv—T'&fl: £ iSSH" 5 t V ^ 5 C t T & 5 . 
^XLMCigi 2 dt?a^^#iPLfcx6M«, X 2 (X+l) 2 =0 (mod 4) T*fo5 

6. 2. 3 ^^^^»7D-^9 7--CD^ 

TV^Xfiffiffltt-fttga- KiCaV/^^^tbS, r^^feTft^Sif^ ^5 
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5 0 i^(4> WigftSftfcA—T'Sr, &M^yjr-<Di>&A~-'7'>-h&*.Z>Zb 
\Z. ±orfr&5 - t^-CfSo 0H£fi, 01 3 arte, ^?f!^|Ep F ^While/V 

Java™?* a y/^ 5*5, 3- KfflStS %©*»XI4^*©^-A«ft**tP 

TBI 3 bt^$Jxfcft#&fj«*S:«ffl-t-5rt^-e#5. «SUI:#I&S#P F 
£W B ttfcBfc* Lfc»g\ t LT#?>tL5 =3 - Ki4E b < * < *5. 

-f 5fc&cD^ife£r#|^brv">3 0 il 3aT1i, /V— ^*f*s 2 2 o©g|$# ( 
S a 2 VSt/S b 2 ) fc#*JU ft 0 0) 



fUSLS;, S b 2 (73^*(rjfA^5„ Bl3bm P b < S 1 £ 2 oog^s^ 
6. 2. 4 7^^7 5 IffflLS^c^? ? y^f^*AOii 

taut, y*-x^>*J-T\z#isr^%ttv*mm-&'*m&#h&. ja 

Hff&SBSLflst-S n t Bret i 5 or raSttifrfk-fSo 
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^VrV^T^S^Uv-i (Xte'^-V) -e&S^rtSo ftMfc9»fc!J/< 



fc5. *>*>5y^ hftiBL-CWStttt, Java™:/i3 ^7 A^l^Ttt** 

Lrt-a^ix-Cl^Linda Mary Wills, S»ft7°n ^7 AfgJt ; 7^- 
S?fcr0 7V©i£fE, Alfi, 45 (1-2) ; 113-172, 1 9 90#I 

6. 2. 5 -r— Tvv-fllf? 

tt>oiSif!S) aesicoiott, ^-^/vapjr-c&So a 
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6. 2. 6 %ft^7^K»#JP 



(1' ) Xte, «[^l-c?$)S^WI«««6:P^ffl$n5o X (2' ) T'ii, fgtfs 

2x&%Twmi$tt3:p /Qzmm'tZo w?>^c, x (2' ) titb^^o 
fc}c^e>©ffi^2 tftsa^tncio^T, r/cz^A^T^ p&tfQi-* 

(1) X = X + V;= T => (1') X-X + V*P _1 ; 

(2) Z = L+1; (2') Z = L+ (P =2Q /Q =P/2 ) /2 
6. 2. 7 a— KO^Jft 

a»afe?0fl2l4, ^f L ^n-feylMHH*±-C5^i-4T7'y S'g y©ttt£ 

ftm-tzzttfxzz. 
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yAtt^L-^K (li^n-fe^) y^y~y y (^l-S^ffiL^V^Tafe^iKb^tx 

t##J£;M#3 LTrt^^^Tl^Michael Wolfe, 

^IJMSyBiffttHa >^ 7. Addi son-Wesley, 1 9 9 6 0 1SBNO-805 
3-2 7 3 0-4S-#I«rt) „ roi^T'P^^AIiS^CIMC? 

6. 3 n-a-^m 

Mg-fSo loroyD^yA(7)ic#<(7)W-<^-ea^fb^#ft1-5>^ N ^nift 
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6. 3. i -r>-7-f ismir? h?4 yjjm 

tLtrtt^^t^ 5 Jeffrey Dean, *zf h ffilRTtffi <D±-fn t?y Aftjg 
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6. 3. 2 -fy^!)-^y-7F 
?xh& 0 

mi 8(4, l^ty y*T?aH£*bfc2ocD^ y y K£r ifcoi 5 i--f V* y 
6. 3. 3 ^P-^yyF 



81914 ^-y ~y^^-K(cm*5flSUt^*-1rs/ H:Ifflt5rtiao 

ty yy K©»©^^5/^— ya yWit5r itfs-e#5 0 ffe*f*, ys? 

, KoI/^^-v-a y« -CSKSrfl* 5 ©l^MHeJtST?fi*< *Vv¥ 
6. 3. 4 ;v—-7°W!k 
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4xfo©^©V<o^fi, @7(C||LT, _hi£Lfc«ifH4^ h 0 y9 titbit 

&!itryp-/vt5it^-et5. 020 c i^s^-cv^s ± 5ft/v— y°#Si4 



*fc#fiMMfftt&K"efcV\, Ld^*^^,^^|a^$tvfcB#^-C\ #7Jtttt 
T-p^AflSSbKHSfciJ, aSL- J M-<ft5tv5 

ft»rg»p B i i^Dy^wt *fert©s*^nj-^, ^^^o^kl 
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-r>fr(D?4 7°(DmB mxJil? V 7-^(0 y y K) (cov^T, rtbiiMJtfT^ 

Trt-a-^tlTV^S (David F. Bacon, Susan L. Graham, Xt/Oliver J. Sharp. 
i^tt^fT^»/c*©=3y/^-l'7^A CM Computing Surveys, 2 6 (4) : 34 
5-420, 1 9 9 4$12i3 1 http : //www. acm. org/pubs/toc/Abstracts/ 0 3 
60-0300/197406. html. StMichael Wolfe. WM\%<T)fc^b(D% 
ttitE^ 7„ Addison-Wesley, 1 9 9 6. ISBN 0-8053-2730- 

4, Sr#flgroii:) *sfr*fcjT,5. 



t-ypym |6, 3, l»co r^yy^y-T^hy^yj S*(C*f 
i-5W»i^Tffl**K*S*-e*>5. ^M^^te, (l) fiPrt-eSS:©? 

✓V 9fc*3VvC#iI"C$>5o (David F. Bacon, Susan L. Graham, SWOliver 
J. Sharp. KttffiW-*C0fc»C0 a 9 ^&ACM Computing Surveys, 2 6 ( 
4) : 345-420, 1 9 9 4^1 2)5, http. //www. acm. org/pubs/toc/Abst 
racts/ 0360-0300/197406. html. ) „ 
7. :r-*^& 
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7. i mm&tnn^kmm 



t L T SiiO 4 X© n -# >\>mm&& •> S T 3 £ S *t« £ 

h/^^— y rooooooooooooiiooj 2rf2tf1~6 l 6 t*^ h^^g: 
#8$* r 1 2 j %m-fkufe£ti% 0 rne>i±**5S* 

7. 1. 1 ff^ft»^jE 

i + c 2 T?***i*****.5. a*<Ofcfe(c N Cl Sr2©**t LTSlR-fS 



{ = T => { 

int i=l; int i=ll; 

while (i < 1000) while (i < 8003) 
. . . A[i] . . . ; . . A[(i-3)/8] 

ill; i+-8; 

} } 
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Z^blzi. o r 4 fctta— iPicltrar « iic±o $ ft 5 r. t # 
Blfg-cfeS) ©-s-v^t^-z^d-^^l^v^v^ it, £fcf±, i^^:^ 

-*T-tt#itti» t ©R5© b K*7, ffi*T'fi#^tti: = * h t ©M 
© Kt7t«5fe9#5„ _kfE«© i 0 = Cl + i + c 2 ©£ 5***6*^ 

ichael Wolfe. High performance Compilers For Parallel Computing. Addison 
-Wesley, 1996. ISBN 0-8053-2730-4, feitK, David F. Bacon, Susan L. Grah 
am and Oliver J. Sharp. Compiler transformations for high-performance co 
mputing. ACM Computing Surveys, 26 (4) : 345-420, December 1994. http. //www 
. acm. org/pubs/toc/Abstracts/0360-0300/197406.html) SrffilH LXWLMV&Zfo 

7. 1. 2 h 

Wftfb $ ft fcfStt«^ y 7, fat, i 19 Rffl © * 7 * & 7° p ^- M"5 

ffi©^tffl^t)*r«^$ft?.*^^(±. «*T=t3sbT-fct5#s„ 

J±\ JavaT?(i, 9 ht^o^-hSftSrtdSBlffiT-feS 



<5o 
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{ { 

int 1=1; int i = new int(l); 

while (i < 9) = T => while (Lvalue < 9) 

. . . ALiL . . ; . . . A[i. value]. . . ; 

i + + ; i. value+1 ; 

} ] 

±^m t * w u cd m -e«-e#^r £ ft s ^ n -/vi/ft^ 1 0 /v» £^ si- 
q t ^t^* 1 <b mmcr? y- a zz-e&s r t tfs^nrtB-e&s (y n ^a^i/ 

y K£r^4&Ctft!4\ iftfi, §^^1^7 7 (static call graph) £rif-<5 

£ft-t\ rft£.cD^i:cDMT**w$ftsr t^-artM-efes, 



void PC) 1 int C; 

int i ; . . . I. . . void PC) { 

. . . C. . . 
} 

void QC) = T => while (i.value<9) 

int k ; . . . k. . . . . . C. . . 

} ) 
P t Q t (C J; o T#f§ £ ft 5 7' n -/ * fliigcDfc^if* £ it 5> ft 3 © T? 

7. 1. 3 »CD##j 

t m& £ ftfcfcHrt t 2 o£t _h<D» 



i-^#j^fts^t^Bitg-r-fo5 0 kfiaco^ap,, . . . , p k t^#jsftfc3S» 

V&V- [ Pl Pk ] tBJt-f*. ftHftfcH:. ^cD^mcD^^kt 

tfc(cif±1-5fc5 5o Miotic, g&a* hhk i: i f> icif ± U Lfctf* 
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SfcftfcB:, 3 oroffifRBrfr, (1) m-rSVCDfltl-P t q©ffi£r 

vy^fSIlF (p ; q) , (2) *fjS-T5p, q Wffi^VCDffi^ 7 /f5 
KSg (V) , (3) pfcqfcC^«fidl<o«jSia»e>*ir^bSiifc«ffc*St 

{RTfc^ro^ >-h-ep = q = 0*fcttp = q = l-Cfc5»^i^ J&*Li8^ 
fcft, p = ld»oq = 0«S, Hfcffl^-f-S. 

D, OR) tii-r5B*jL*s%3l$n*imtf*?>*v\ loor^D-fll 

NDJ t TORJ fc^li-rSx— 7'>^I112 1 c tE12 1 d t i^SU* i-^StbT 
V^5 0 2 0C^/H|V1= [p, q] tV2 = [r, s] ttfi^-X.bt^X^^ 
ZtUfe-f&k, V 1 &V 2 ^\ AND [2p + q, 2r + s] irLTf+f^tlS 



12 1 efCCi, 3OC0y— ;VftA= [a 1, a 2], B= [b 1, b2] , 

c= [ci, c2] (oftmvffi&tf^ztix^Z),, *mm%t,mu\^tz.mL<Dm 
5rt-c&s 0 g2ie©j (3 1 ) w (4' ) ft, m^th^m 

»^9J«3S-C5dS, SWr&oTjLjLS. £ (5' ) fcjt (6' ) iiS 

T$Pj^ii3S$ti5 0 wv^x.ft!f, 12 1 b^fjgl2 1 d *T?©3lff^r/Vy ? 
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, :o:t^ @2 1et'Oj (6' ) T'^foft-SJ;^ S*SH£rf+l|-f 3 

h7-f^4(Trie traversal) ^feS £ b 1>>»SMX~ibZ>7°v >fy h,tK m<DX h V 
«*.«, *MJ>^ "AAA" , " B A A A A " , "CCB" SrjSgtf L^S £ 

5fc«S6£;h/C^5ia2 2©||*G£#iiL < fc5. G^ioT^^Sfgii, 

G (1) = "AAA" , G (2) = "B 



AAAA" , G (3) =G (5) = "CCB" , &J;U\ (H^di^n ?y A 

g (4) = "xcb" r*fe5 0 mmmm<DM&iaz, ctm 

t^5rtSrSJSb-C*5<ii:^fig-cfe5o ^©SISMLwEBltt, Java/W h 
1" 5 7 s n ^ 7 A fiHE* $ H 5 £ fc fc nIigT-& 5 „ 
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7. 2 m&mm 

©riril, $"7V>^? <7— >a ^©S/^i^sTS >^<DM 



7. 2. l *#7^$:<£>{#£- 

Vj v k (Dm-^mm^v M (Dm&{cm^-r?>^h\-i, 2ojy,_h»x 

5fc*5 5. «S**WtL."C, 2o©3 2t"-7MfiX v Y£ 6 4 If y h^fcZ 
Z(X, Y)=2 32 *Y+X 

Srftffl L"t, H 2 3 a ^«tl^^ s #^n^« @23b (c:f4»otf>©ffilp.ft0!| 
tfS^£*LTV>5 0 H2 3ii, 2 0(03 2 tT y hS^X, Y£lOCD6 4 

try h«*Z's##i-5r fcfr^brv^s,. Y^ Z w±«ij3 2 try bfcfi*, 

V^ff^^ffl^tiS- t^ffiX-feS, [22 3 ate, XtYiCiSiDSt^St 

wfcfecoM'J^^bTv^o 02 3 b (4, So^©«^^M^t. rcoMht, 

M&tf ( 2 ' ) t (3') t*rz + = 47244640261j CO^IC^I" 
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iH»»v^-fti(-fem-r5^t^Brfgr'fc5j}?-^ (bogus) 



ICiot, If (P F ) Z-rotate (Z, 5) Ciot, Z <D 

2 o©¥#8B$><Hte1-5 J: 5 £ jL£3i&g«r#A1-a £ i aswtl-eibS. 
rcttroio©'!^ v 2 v K £\ ftcoj; 5 nSffltuVJ-fto l 

v A = 1 . . . k 
v 1 ...v k 

V 1 V^t^x^ msi\ VAO^ 

$4 -7 ft, B^mSi^^rv L , . . . , v^^TV^-ffti "9 *>it^w< 

7. 2. 2 E^ros*/* 

±©E?lSrlooE?!lt#^-1-S^, 1 ocDSB^JSrff •? *tf (fold) (&7E 
§5:2r±f*£*3) *», Sfctt, locOia^iJ^Tafti-S (flatten) (ft 

K?iJH#^<o»o*>(0«Sr^1- 0 (1-2) -Cf3\ EJ0A#2o 

rorftBa^ijA i , A2<Dmcftmziiz><, auk isto^yfy^^^tts 

H24CDS: (3-4) if»i5l-U-t»ga?IJB, C/^Si urcosa^ij 
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yZ (6-7) tt, lfrttmW&2&K&M~Dl<DM\ZE<D£.o\Ziit<9S:-&tl 
5: b&»Smx°hZ>frZ^VX^6 0 Mt, SI (8-9) ii^m^r^LTV^ 

BSKHf * £*feftT L* o T V ^ 5 r fc |c 4 5 tih 5 . 
7. 2. 3 ift*ii#<£>{tlE 

- (V, M) ifH^tU wi^<DV^C(D4 >^^>^^(D±'y hXh<9 , M 



) til* (frfcft^fc^ V^V^ifcfc^D^SiiiCioT, C 2 ffiC^ 



-50- 



sMtC|fe#LTV^o JavaOi 5*H"M-ett, -^IC, UtfS, -l' V* ^ 

t< y^u 7 HLfdSot, ^^C^^tt/A ffi^PgSiES©^© 

TV^5i5fc. &5 loco^y^Sr^fiJ (7r^^) -TS^ii, Bl25bt* 
SftT^5J;5}£, Jfffcft, (bogus)©, ^^^SrffAI-Siti^BrtB-e 

y^^HSLff^^Wf-W^-t-Sr t^BJh-t 5%©Ht^<4v\ rtt£B5it 
■f-Sfcfcfc, -jRftjfcB:, 02 5 dfcSSftT^a J; 5 ie, 7 7 ^^P^i}f 
A t fc> £ ft § 0 r n fe © 9 4 :/»«fe»#77tt£rif ft $ * 5SU ©^ Sfeii 

fc©tf5' £-es>5„ 

tv>5„ y7r^^yy^i -^©Wiga^fcLT Liotv^s^x^ hit 



5, William F. Opdyke and RalphE. Johnson. Creating abstract superclasse 
s by ref actor ing. In Stan C. Kwansny and John F. Buck, editors, Proceedin 
gs of the 21st Annual Conference on Computer Science, page 66-73, New Yo 
rk, NY, USA, February 1993. ACM Press. ftp://st. cs.uiuc.edu/pub/papers/ 
refactoring/refactoring-superclasses. psSr#fi§ £ flfzl/ 'O „ V ~7 y 9 h V V 

«-t-3#«#, *ffc* (*s*e><»JWfe«j4) m?7x<D*im£ti6 a «©d 
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CitC^bW^W^^fcblt (buggy) ^-i>gytfer# 
7. 3 9WifW&. 



opaque) ^ftMlfc f ( i ) tfSHIfeSixS. 



1 f 
int i = l, A L 1000] ; int i=l, A [1000] ; 

while (i < 1000) - T => while (i < 1000) 

...A[i]...; . . . A[f(i)]. . . ; 

ill; i++; 
} } 
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©^il^ DTv-V^lii*-^V^*3!3, ff2CD^«:e*7 0 o-tr^ (1 igh 
tweight poess) iC^<3V , >TV' l 5„ 



8. 2 KSrffiffli-a^wteflfjt* 

*>, ^IJH^PAR Sl S 2 S n , ENDPARftroni®^ 

n^5A©Jftoa»©#faflW;SS, ^SSWlgfK [18] -CfrfrftS r t ijSBTII-e 

#ttSr^Tl-5o (1) J a v a^I/y KO^^^a-!) 
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5» 



mmtt, ±y^a>8. 2-effiffl$n-CV^5«fflt#^fi©L-CV5o 

r7y 2 -u iSx 2 K<f u<*^t^5«*»»^e.©^fti«)*JI^* 

9. ffiumt : ?m&#: 

*mm<vmuk%m?>£< wstt^'/Hye. 2 ©muse*) h^d 

^7 A 1*3 In ^yn^A (bogus program) SriI£>&ti>i:H 
V^*S4x5^t ^16^*5. W&gLfcT-7V>r-*S9>\X H 
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irtrKJh-rSfcfet, iiSL'f[2«^S*J'ftffl'C*S^S*tf*rj-C&S <> Miff 
oTffitt^tLfc#-^3-K (bogus code) ?rfflJ6}Afe 0 ?MfL#» 

^SE|2 8 b^£>El2 8 d^^jxTV^So 
9. 1 ^K^m 

9. 1. 1 



tt*fe5o -Mitt, t^^/ 3 y6. 4f/^t^tv^J; f o r/v— 
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5r t*S"Brtl-C&5. 



{ { 

for(i=l;i<-10;i++) =T=> intB[50]; 

A[i]-i for(i = 10;i< = l;i — ) 

} \ i ~i: 

B[i]+=B[i*i/2] 

} 

m&<Dmm&timmm<vmmmvikimftL.r^?> [3 6] „ 
9. i. 2 nmmmm 

BS^BSaafeW— ^tL-T, HoseMochayB^7^t5 (Ma 
rk D. LaDue. HoseMocha. ht tp ://www, xyny 
x. demon. nl/java/HoseMocha. java, Janua 
r y 1 9 9 7) „ ZL<D-?n 7 7 .Mi, Mo c h ar^ 7 (Hans P 

eter Van VI iet. Mocha The Java deco 

mpiler. http: / / web. inter, n 1 . n 



et/users/H. P. van. VI iet/mocha. html, Ja 
nu a r y 1 9 9 6) <D^&*m^tt$>\^W^WLVt£ftX\^ a Ho s 
eMo c h a ^P^AH, V— ^7 ArtO^TCO^ffiiO^Ofo 

LT£<l£#£,&f££ftV^5, Mo c ha&^^y^a^-tirSJrri+^-e&So 
9. 2 *IKIia«ig#©«BUfcfFflB 
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T^fScLT^S) £ 01Jx.tf, if (x*x== (7 F *y*y 

-1) ) ^n- #/WpJKi£fgT*fc 9 , R = X*X ;... ;S=7*y*y- 
1 ;. . . ; i f (R = =S F ) . . . ^^a-/WiHfST'fc5„ R t S 

flisi-rs^t^wti-e&a. rro^&ii, x * x == (7* y * y 



-1) tftlirandom (1 F , 5) < 0 CO i 5 ft^ftn-tf^Si^L 
9. 4 T'P^A^'fS/y^lc.fcSWW 

^rttott!) ^yKO^n^yAJ:?) t>a**Sffl«t?&5w tSr3S^,-rS 
a-Kfc, ^fc^-tf^a-Ktf^Off&ktU ^o > (b) 
ir-C&So T'n^yA^y-f */-yyv—)Vi)\ z. o VtcmiitlcMm- &tcmz 
^7 4 7-tm$fo% ! gm^mte^ J r>? (chunck) Off/n^7A^ 
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# & K i 3 ft 3 K tt) * 7 -T f - 1 ^fltft *^5-f^*feC**6J:5K!IW 

Unravel (James R, Ly 1 e, Do 1 or r e s R. Wal 
lace, James R. Graham, Keith B. Gallaghe 
r, Joseph P. Poole, and David W. Binkle 
y. Unravel :A CASE tool to assist eval 
uation of high integrity software. Vo 
lume 1: Requirements and design. Techn 
ical Report NIS-TIR 5691, U. S. Departm 
e n t of C omme rce, August 1995) 5 ft— %kl^ 
Jk^X^Z,*? 4 islsfy— fr<D£. 5***^#:^JH4 (add variab 
le dependency) li, /J> £ ft* * (D^marMm^ffcT 6 & 
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, 4 0 0 Ofi<DC7uy7J»\£ML-X&M\s1tMfr&\£tt., Unravel^^y 



mainO I = T => mainO { 

int x=l ; int x=l ; 

x " x * 3; if CP 1 " ) x + +; 

} x = x i VO ; 

x = x * 3; 

} 

9. 5 #«J#*f 

T (p f ) ffiB?kzzb#wmi-5fri>Mtift^c>-?. £. 0 Ltzummm-tm 

$f£3 5. pif (Leap Year)... £r#*£^fcl\ 

<nm m) imfczti, ±m^mm^m-A^<Dmm$.x-tx{£m^^htix^ 
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tiz>zt&»smxhz> 0 

(i f (Leap Year)...) ^tfS^-^ft, itLSiHlffi/c.5> 5 „ * 
P ^ 7 A MS X tit. Z> X 5 \C) m$t£ ^77^^) /I/a— if j y^7x-X^IL 
WA-rSSmi^t, (Ell l b{^$tLTV"5 < t5*) P ? ^f&^ffA1-5^ 

©loll, ^W«ti£IStBl^fflSr«pfc*5-i:T-*)5 0 T£<o«-t?Bu JgfLfcS 



{ = T => { 

Si : int k = 0 
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bool Qi (x) { 



} 1 ; return (P T J} 

bool Qtz (x) { 
k-=2 31 ; return (P T ,)} 

{ 

if (Qi (j) T ) S i ; 



if (Q 2 (k) T ) S 2 ; 
} 

9. 6 x-^:?nHWfR:J;£Wffi 

«*?i^-r-/»3-K*iSftl^ML-TV^5 0 if (False 
) . . . ZM<9m< rtit 5EA/fc*3-K (dead code) m^Xh V , 
i fX-fJ-y? mx.t£, 0 2 S^ftitSS^S,/) j^P-a- K*#«)-r 
— K*^^f -fV^ (code ho i s t ing) Xh 9 . Ztl 

3 0 ^*E^*«T*H, PJSS»X-^7n-#*T (reaching defi 
nition data-flow analysis) £'(feffl1~<5SIM:K#K"e 
t^B]-ffi-efe5 0 x = 5 ; . . . ; y = 7 ; . . . ; i f (x * x 
= = (7 * y * y = 1 ) . . . . 
9. 7 jSgcDSESmciSiffi 

ir~? y u-mm^wmmmMm^zvic+tttitzimjjx 
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<^3o SISo:t4*5&, MlcioTfiEPJiBrtg^a (#lxJ3\ x 2 (x+1 
) 2 =0 (mod 4) ) fi, +#tm^©^f£Sl:/n^9A<DilJ^BftT* 

„ Tfa»«T?(4, fcftMfe&iK S 2 iJSfetfc3-K (live code) T 

/X— 7° (bogus loop) ^fivl^ 



{ = T => { 

Si; Si; 
S 2 ; n - random ( 1 , 2 3 2 ) ; 

} do 

n - (<nX2)I=0)?3*n+l:n/2 
while (n>l) ; 
S 2 ; 
} 

Co 1 1 a t zmMb LXtatbtiX^Zo -hlE/V— t/tfSffffcil&T't-S 
£5 5 t^5- t^lSSlJS^So rro«$jrogEft<D«MfSff£b&v^\ 7*1 



9. 8 ^SU&l&fciU^ffHffi 
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i o. -iMlikT /v=? y 

WHILE NOT Done (A) DO 

S:=SelectCode(A) ; 
T:=SelectTransform(S) ; 
A:=Apply(T, S) ; 

END; 

SelectCodett, ilSUt %;(DlkCO K^i?o: ^ 

h^M'fo SelectTransfor m|t, n C0#^C0 y — x =r~- K^T^i? 



ftffftk&v^&SrM-fo App 1 yi>K W&&V—^^— K^r/v^y hfcjg 

y-i^'r-i'r— ">3 5. W&fiff •? Lt> Sele 

ctCodetSe lec tTrans fo r m i: y^Aife y— * a 

-K^v^y h/'g&fcJIU Done/5^ #^CDK#£rT 7° U 3 V© 
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j; o -offings, 

ig-y-^a-Kd-^i^ hsicm-r&PsVh&mc, p s (s) -f^y 

K^v?^^ h SCIt5AT*S)5fiFlc, A (S) = {T ± -- 
>V 1 ; . . . ; T n =->V n } M:, f ftT^^f v^rov 15 , 

fctoT r/pg^-efcsj *ffcft3-K*W£©aE*^JHA+<5©T?, r5L7c 

/^^^v-^-T^ii^L^-f-^fc^So SSJttffi (appropr iate 
n e s s value) V WS if, ffi^T t (£ £ otlAJ 

5 3-K#± 



#y-^3-K^-^ai^ hstcli-fS iTf&S^tJi, I (S) iiScD^SLfb 

^^tyr^tfes. 1 (s) a*, s(OfHm^mut-r?>^t^HHfz»mw 

) d*H I GHT*&5f£5 5 U WitLT r/i/y K7VK^^-j 

3- Kft^trifrS-KiH:, I (s) ^LOWfc5 5o 

il, R (M) = 1 T*&5o 

h {Tj ; T 2 ; . . . } T*fe5 0 rOT^JXAft, $P>(^, ^-^co^mi'S 
SrM-T) 3otf)p B pfStT res (S) , T pot (S) . T cost (S) k, §S«P t 
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jjs, P s (S) , A (S) , I (S) , R (M) *«H1-5o 9rE©ilStfl;U"< 

A' £#t&x.2>c, 
A* : 

->a ^A C 1 ; C 2 ; . . . „ 

b) WRKJ;or£il$n5*ip5>f7'9y L l ; L2 ; . . . 0 

c) mJmWzv b {Tl ; T2 ; . . . } . 

e ) y-^a-Htf-^s?** hS{cj*i-5aE*T©fiK**mr«3ooBBjK 

T res (S) , T pot (S) , T cost (S) . 

f ) AtcJtt-SA^f*-** ?H=iIl;I2;. . . }. 

g) 2o©S'fitAc ceptCost >0 ftitKR e qOb f >0 o Acce 
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ftT^P ^r— -> 3 VA' „ 

i. aaflssna^tr^y^r— x'hvc! ; c 2 ;. . . fcc-nrs. aaft 



(b) Hr? Y7t4;v%u — K-fS^ t ^BrtBt?*) 9 , Ir-fV*. 

K7 7-f/H 1 ; L 2 ; . . . Ki"5 0 

M1-5y-^WSW«igt^cDffl$ttttic^ffi-2»o ASW^f-^fllairfey 

(a) K'H<T)^^—=fv\z.^-f^wmW^^yy a 

(b) Art©^-fy(cMt5^fflt/77 (1 

(c) Art0^77|Cit5«^77 0 

4. vyfy^R (M) *3j:tfP s (S) (7;V=* U XA 5 £M£/8) , I (S) 
(T/w^!JXA6Srttffl) , RXfA (S) (TA-^y XA 7 Srffiffi) *ffilt5 

o 
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3^ r-SrjgilLfclJS^ ^(D-yu±^tmj-t?>o 
RE PEAT 

S :=SelectCode (I) ; 

T :=SelectTransform(S, A) ; 



UNT IL Done (ReqObf, AcceptCost, S, T, I) . 
T/Vd" i) 2 (SelectCode) 

i ^#-*©y— y-fr-f hs£ i (s) M-^yr/u rcoi (s) 
ns^t^Wtl-efcao S^ifcifttf, I (s) ^ft^t^tiSi^l-s^s^ 

7*/P=f" y XA 3 (SelectTransform) 
All : 

a) y-^3-K^i^hS, 

b) 7 ^ y X.A 7 Kl ± o T tr* £ ft 3 « "9 ws-Ktt-^ y £V y A 0 
fX1-5fc*{c, ffit<D«<D3§j|ffi (heuristics) dStefflWefca 

„ l^u #jt-r^<# 2o©ttH7SRas^&5„ ante ams^fcaE*^, s 
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2(r N ^ fttmte&G-OtcfttDUW. (bang-for-the-buck) 

h % */ivffc -r z> ae* & j§*R-r § r. 1 1 ± o x mm £ n 5 . r. ti b o 

T — >V^A (s) i*n?&5<£ 5 tliT^IU ^^O, (wl*T pot t 
(S) + w2*T res (S) +W3*V) /T cost (S) jfiMcMtZtl&o 
7/^yXA4 (Done) 
A* 

a ) ReqObf, jlSMbW^f? 

b) Acceptcost, m^-t^n^mfimnmr^i-^^o 
a) mm, 

e) Mfty7^*yr^T-y^i 0 

: 

a) Mfr^tifcR e qOb f „ 

b) Mff^tifc A cceptCos t. 



cOli^-^tS^V^TV^So Doneli, ^C, ReqObfiAcceptC 
os tiSrMffU ^•T*ff(-SbTV^^if 5 fl»«rPk*5o wl, w2, w3 

I(S):=I(S)-(w 2 T pos (S)+w 2 T res (S»; 
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ReqObf : =ReqObf- (w 2 T pos (S) +w 2 T res (S) ) ; 
AcceptCost : =AcceptCost-T cogt . (S) ; 
RETURN AcceptCost<;=0 OR ReqObf<;=0. 

a) T'fV fr—i/a VA„ 

b) At^-rSA^Jx-^ir^ H = { I 1 ; I 2 ; . . . } . 
titfj : 

M) „ 

b) Art©«-y-^3-K^S?*^ bS^HLTST^^SWMffitf* 
ro-fey vyfy^Ps (s) 0 

tLSA^T'-y-iry b I tS^<yp77^7K*T^H-v'a ^Sril^T-f 5 

y/i^yp-^titaR (M) (MWUfTBS™^*) Srft^-TSo 
2. fft^^f^^iPs (S) Srlt^1-S„ P s (S) yny-y 



FOR S : =A DOlC*5»t54y— ^="— Ft/^i^ b 
O : = SdM£ffi1"-£?£S^<0-fe;y b ; 

C : = SdM£ffi1-5iiSW</U»fg»jgfo: (WH I LEX WK ^1^7 
K*W O-fey h ; 

L : = S 5 7-f 7*7 y ^ 7 X/zl'-f y Ot y b ; 

P s (S) -OUCUL ; 
END FOR. 
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At! : 

a) T^J^-Va >A 0 

b) R (M) , M<Dy>? 0 

Svyfy^i (s) „ 
i (s) 3.— iftioTW^fetriietsns^t^Brii-e&SK s^it 

art # WHt? & 5 . ^ffl WflBfc* Jl«fcffl!fc<oii 5 Tf *> o T J: i \ 

1. AOftfffl;l''-f yMKHLT, M©7>?, R (M) ir*fL 

Tl (M) SrSJtW^*a. -f-ftfr*), rw^ffifi, r/w-f-vSrHtT-rs©^ 

I (S) ^S«S$ittt-r5. r©»^fc|n|«{^ ( 



A* : 

a) T^y ^— >3 >-A„ 

ot^h^MSv^t'y^Ps (S) „ 

■■ 

M4Sr#x.5^yt:°^^A (S) „ 
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FOR S : =A DOt*5tt5=S-y— ^3— K^-y^i^ h 
FOR T : =#»DO 

V:=Pt (T) fcPs (S) iCD|S»gM14(£>a^ ; 
A (S) : =A (S) U {T-->V} ; 
END FOR 
END FOR 

1 1. 



^r*t<-T5o *3SW-CH, «f***S^ nm-7B??J*#* itWIrWf 
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1. Sffcftiiafl2£*#&jL£ft5'«tT?fc5. 



JftSttft^ife t ?FBJtt«itf* t KISS £ »ft f> ft v\, 

n.i mutmjj 

« £8 5 5 t -f 5 APsH fc *> © S ffi SrlSft L i 5 1 1" 5 Weft < . PS 
PS 6tlfcI?l^*^5r^1-5„ SS^t/ d / -7 A fle^flltcjR^TV ^5 R t) l£*5 

i^Tfctt, 3>o, ^- F7i7©*a3iiffi©il^\ -fticHi-s 
-c fc tt , ttiaafls r t* y * - ~> a vasfegre *> a i;:-*-^ fcv \ 

jBSJPIW»^iafSWIS»SSiiv^o< ©KS-tS^rM J; "9 % y y -x©M©B#M^ 
TT^y-ir— >ay*:»ft;$*5J:-eri, £ ©r t ttM«-cr±ftl^;fc* 

*tfiIftoT:}o9 , Lfc^oTffl^t@#©IS^©#irt*i±ft< ftoTV^S /-£.?> 5 „ 
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b) ) ftZtD&WfDM&LX* 



& ? V > L fc t (±) Hff Ifi* RTf t ft S t V ^5 £ & # fo 5 „ 
11.2 ?lSL{b©ffi(Z)«ffl 

_hfa©a 9 ©mftffi^^i-ftco^wft^swkffi^fffti-s^^^tL/i 

fcftMf^fiStL (SelectTransfor m7;V^!)XA (7VW=* y XA 3 

ciofctmft^-v'a ^4^$ii5r t^"5rtBt?fes 0 su^^i^-r 

V^&gfti til, ^fDjSMUS^— ^a^coatf-Sr^Ati-T, ^ftSrx— 
fcJtRL, ^CD^-y v'^/VCDT^y i/B VSrH*s«Abfc*»Sr3S^ 

y^hU'areoJSWcJKHjSIEJKIil^iSjSSL^* PRE) fiyf1-3T»rtH4t>*>*. 
-C, ^SftlClfA^tl/cJ a v aT:/y^-^3>(^LT«IMKgJ&«it# 
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LT V > 5 ©T*& 5 i ^.m-t 6 Z b % BTIgT'fc 5„ 

e>-r%<Dt#^e>^5o iitiroiom SE*3ft;fc:/p^5Ai8^ #3E& 

Sr-a'tf) «i7^- — ^— v — =^y^ (watermarking) i 5 ftffiCDT:/ 
Sftfdt^fl, ^(D^y^tt, i? a i>1~ SVtDmUtm 

«f-^^t Jt*rf 5 fc* WC, * y S^/vcd T 7" y 7— 3 ^ £r iS#1~ 5 n 
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[01] 




FIG. 1 

[02] 



FIG. 2a FIG. 2b 
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[02] 



FIG. 2c 
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FIG. 2d 



I D CO 




^ V ^ H 



Jb-7 



3tCD 

g:t-5>' 



it© 



SIR 



FIG. 2f 



FIG. 2g 
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[03] 




FIG. 3b 
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[04] 




B~*5 





FIG. 4a 
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FIG. 4b 
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[05] 




FIG. 5 
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[06] 
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[07] 



-rwy=>Lm. Halstead 

jd 2 WORj^O (eye I omat i c) Q)Wi& l &. McCabe 

E(F)&, FTO^tM)ffr£^[Ztf^£ 

H 3 An^ffillitt Harrison 

H 4 ?-5QD-cflfi£g'fe Qviedo 

H 5 3? 7 hff)»ti Henry 

E(F)(S, F^CD^A^;>(-5>CD&££[Z, til, FlZd^t^fl 

ji 6 ?-3i&i<P?iattt Munson 

ife£±±(Z, f Lis Ib;*>h5?Y7CD»t££±t(Z^ ±i^^^ 0 



M-7 OQ ^ r> U g 2 Chidamber 

E(C)&, C^CD^^^H^Cwr)^. «*}1&I*)©C(Z)>1£ 

GDIs)— tz^ h^Ca)^^^K##9SL«H^(^0^±t[Z, it^^^> 0 



FIG. 7 
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ims] 



[09] 



FIG. 8a 
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FIG. 8b 






FIG. 9 



[110] 



{ int v, a=5; b=6; 
v =11 =a + b; 
if(b>6) T ... 
if (random (1,5) < 0) F .. 

} 

FIG. 10a 



int v, a=5; b=6; 

if(...) ... 

. (b is unchanged) 

if(b<7) T a++1 

v =11 =(a>5) 7v=b=b;v=b 

FIG. 10b 
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[SI 1] 




FIG. 11 
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i=1 i+1j j=100; 

while (1<100){ t while <(i<100)//(j*j* (j + 1)%A = oj i" ) { 
i+4; 

I i++; 

j = j*1+3; 

(c) ) (d) 



FIG. 12 
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FIG. 14 
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FIG. 15 
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FIG. 16 

[017] 



m. w=m 1 




FIG. 17 
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class C { 

method M1 (T1 a) { 

oM1. cM1. 
t> 1 ,...!> k , 

} 

method M2 (T1 b; T2 c) { 

S k1 S k2 ; 
1 m 



} 



{ Cx=newC; 
x.M1(a);x.M2(b, c);} 



class C { 

method M (Ti a; T2 c; int V) { 
. , . M1 „M1 , 
if{V==p}{S 1 ;...S k ;) 

else {S^S*;} 

} 

} 

{ C'x=newC'; 
x.M{a, c, V =p ); 
x.M(b, C,V = 9);} 



[019] 



FIG. 18 



class C { 
method m (int x) 
l$l ...S k } 

} 

{ Cx = newC; 
x.m(8); ... x.m(7); 

} 



class C1 { 
method m (int x) 
{S? ;...s* } 
method ml (int x) 
{S? ;...S c n } 

} 

class 02 inherits C1 { 
method M (int x) 
CS^ ... Sb } 

} 

{ C1x; 

if (P7 ) x=new C1 else x=new C2; 
x.m(5);...;x.m1(7); 

} 



FIG. 19 
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[02 0] 

FIG. 20a 



for(I=1,I<=n, I+=64) 
for <i=1 ,i<=n,i++) t for (J-1 ,J<=n,J+=64) 

for(j=1,j<=nj++) ~> for (i=Ij<=min(I+63,n),i++) 

a[1JJ=bfl,i] for(LJJ<=mln(J+65,n)J++) 



FIG. 20b for (i=2,k(n-2),i+=2) { 



x 



FIG. 20c 



a[i] += n[i-1j=a[i+1]; 

for(i=2,i<(n-1),i++) a[i+1] += a[i]=a[i+2]; 

-l+=a[1-i]==[i+1] ^ }; 

if(((r>-2)%2)==1) 
x[n-1]+=a[n-2]=a[n] 



for(i=1,kn,k+){ 1 for(i=1,kn,i++) 

a[i] += c; a[i] += c; 

x[i+1]=d+x[i+1 ]=afj] for (1=1 , i<n, 

} x[i+i] <d+x[i+1]=a[i] 
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FIG. 21a 
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FIG. 21b 



FIG. 21c FIG. 21 d 
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(1) boolA,B,C; 

(2) A = True; 

(3) B = False; 

(4) C = False; 

(5) C = A&B; 

(6) C = A&B; 

(7) C = A i B; 

(8) if (A)...; 

(9) if(B), 

(10) if(C) 



(V 
(2 

(3 
{4 

(5' 
(B r 
(? 

(8'; 



short a1,a2,b1,b2,d,c2; 
a1=0; a2=1; 
b1=0; b2=0; 
d=1;c2=1; 

x=AND[2*a1+a2,2*b1+b2j; c1=x/2; c2=x%2; 
d=(a1 A a2)&(b1 A b2);c2=0 
x=OR[2*a1+a2,2*b1+b2]; d=x/2; c2=x%2; 
x=2*a1+a2; if ((x==1) II (x==2) ...; 
if (b1 A b2)...; 



(10') if (VAL(c1,c2]) 



FIG. 21 e 
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String G (int n) { 
int i=0,k; 
String B; 
while (i) { 

LI: if (n==1) {S[i++]="A";k=0;goto L6}; 
L2: if (n==2) {S{i++K'B";k= -2 ;goto L6}; 
L3: if (n==3) {S[i++]="C";goto L8}; 
L4: if(n==4){S[i++KK";gotoL9}; 
L5: if(n==5){S[i++3="C ,, ;gotoL11}; 

if(n>12) gotoLI; 
L6: if (k++<=2) {S[i++]="A";goto L6) else goto L8; 
L8: returnS; 
L9: S[i++]="C"; goto L10; 
L10: S[i++]="B"; goto L8; 
L11: S[i++]= n C"; goto L12; 
L12; goto L10; 

} 

} 

FIG. 22 
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FIG. 23a 

Z(X + r,Y) = 2 32 . Y + (r + X) =Z(X,Y) + r 
Z(X,Y + r) = 2 32 - (Y + r) + X = Z(X,Y) + r ■ 2 32 
Z(X-r,Y) =2 32 Y + X + r =Z(X,Y) + (r- 1) • X 
Z(X.Y-r) =2 32 Y-r + X = Z(X,Y) + (r- 1) -2 32 - Y 



FIG. 23b 



(1) int X=45, Y=95; long Z=1 677590661 19551045; 

(2) X += 5; x (21 Z += 5; 

(3) Y += 1 1 ; {31 Z += 47244640256; 

(4) X * = c; ^ (41 z +- (c-1 ) * (Z & 4294967295); 

(5) Y * = d; (5 1 ) Z += (d-1)* (Z & 18446744069414584320); 
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(1) intA[9j; 

(2) A[i] = ...; 



(3) intB[8],C[19]; 

(4) B[i] = ...; 

(5) C[i] = ...; 

(6) int D[9] 

(7) for(i-o;k=B;i++) 

D[i]=2*D[i+1]; 



(8) int E[2,2]; 

(9) for(i=Q;i<=2;i ++) 

for(j=0;i<=2;i++) 
swap(E(i f j], EQ,i3); 



(V) intAt[4j,A2[4]; 
(2 1 ) if((i%2)==0)A1[i/2]=... 
eise A2[i/2]=...; 

(3') int BC[20J; 
(4 1 ) BC[3*i] = ...; 
(5') BC[i/2*3+1+i%2] = 
(6') int D1[1,4J; 
(7) for(j=0;j<=1;j++) 
tor{k=0;k<=4;k++) 
if (k==4) 
D10,kl=2*D1D+1,O]; 

glSG 

' D10,k]=2*D10,k+l]; 

(8') int E1[8] 

(9'} for(i=0;1<=8;i++) 

swap{E[i], E[3=(i%3)+i/3]); 



FIG. 24a 
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\ C = (V,M) (a) 



V 
M 





Jb-h 

r 



_^_C2 = (V 1 ,M 1 ) 



V 2 
M 3 



^ C 1 = C 2 ©(V |f M 1 ) 



V1 
M 1 




M = M 1 ©M 3 



FIG- 25a 



JL>- h 



\ VOW (b) 



V1 
M 1 




\ C 2 = (W 



V 2 
M 2 



C 3 =C 1 ©(V 21 M 3 ) 




/3 



V1 
M 1 



v 2 

Mo 



C 3 =C 1 ®(V p ,M 3 ) i C 2 = (V 2' M 2> 



C 2 =C 2 ©(V 2 ,M 2 ) 
V 1 nV 2 = 0 
M^nMg = 0 



V1 
M 2 



FIG. 25b 
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)b~ h 




Vl 




V 2 


M 1 




M 2 



C 1 =(V 1> M 1 ) 
C 2 ^(V 2 ,M 2 ) 




V3 
M 3 



7 



V1 
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M 2 



FIG. 25c 



C 1 = C 2 ©(V 1 ,M 1 ) 

c 3 =c 3 e(v 2 ,M 3 ) 

C 2 =(V 2 ,M 2 ) 



V 2 =V 2 nV 2 

v 1= v r v 3 

W V 3 



Jb-h 

r 



\ C a (V,M) (d) 



V 
M 





^ C 2 = (V 2 ,M 2 ) 



V 2 
M 3 




FIG. 25d 



C^CgelVg.Mg) 



Vl 




V3 


M 1 




M 3 



v=v 1 ©v 2 

MsM^Mg 
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FIG. 26 



Node g, h; 

method P(...,Nodef){ 
/ * 1 * / g = g.Move{); 

h = h.Move(); 
1*2*1 h = h.lnsertjnew Node); 

1*3*1 x.R(...,f.Move()); 

/.4 */ if(f==g) ? ... 

/*5 ./ if{g=h)F... 

/ . 6 J f.Token=False; 

g. Token=True; 

1*7 J if (f.Tofcen)?... 

/* 8 */ f.Token=True; 

h. Token=False; 



} 



/.9 J if (f.Token) T ... 



[03 0] 



6 


Input 




program M; 




program M'; 


if(P T )... 




"if (True) ... 


endM, 




end M 1 . 


4J. 






Output 




Output 1 


* / 






< r 


5]-? 





FIG. 30 
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thread S { 

int R; 
- while (1) { 

R = random(1,C); 

X = R*R; 

s!eep(3); 

} 

} 



thread T{ 
int R; 
while (i) { 
R = random(1,C); 
X = 7*R*R; 
sieep(2); 
X*=X; 
sleep(5); 

} 



} 



FIG. 27 



int X, Y; 

const C = sqrt(maxint)/10; 
main (} { 
S.runQ; T.run{); 



if((Y-1)==X) F <= 



} 
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(a) 



if (P 7 ) 



'1 



else 
if (QT) 



if (P 7 j 



else 



Si 



if (p 7 ) 

else 



(b) v (c) 
=> if (True) => if (True) 



(d) 



else 



S 3 



else 



S 3 



else 



s bug 


s bug 


s bug 


2 


2 


2 


if (RF) 


if (False) 


if (False) 


s bug 


s bug 


s bug 


3 


3 


3 



S3 



FIG. 28 



-97- 




-98- 



[03 1] 



A 

m 

A 

A 

Jl! 
i 


LTD 
LO 


LO 
LO 


LO 
LO 


6.2.1 


6.2.2 


6.2.3 


6.2.6 


6.2.4 


6.2.5 


CO 
CD 


6.3.1 


6.3.2 


6.3.3 


6.3.4 


6.3.4 


6.3.4 


CO 


co 




A 
A 

_£_ 








co 

=L 
cm" 


CO 
zL 

% 
=1 


CO 






:i 


n 




CO 

It 

•s 

=t 


n. 














jL 

A 
n 




& 

m 


m 












K3 
to 

r J 
W 

□a 

G 

rffO 
ilnn 

m 

cm 


m 


5 


m 




m 


m 


run 


V 

H 

a 

A 


V 

H 

O 

A 
D 


V 

H 

o 

D 


£ 

X1 

e a- 


(3 

J 
VJ 






V 

H 

r 

A 
D 






HA 1 




V 

H 

A 

A 
A 


V 

H 
O 

A 
A 


V 

H 
O 

A 
A 


K 






w 


c£A£ 
KnA 




m 


-B- 


0 








i£ 






& 

VtQ 

* 
[ID 


a 
A 
m 
o 
A 

e 

Q 


6 

'A 

V- 

1 r- 

r> 

1 


1 n 

-Hs 
<^ 

G 

X 
A 
A 

n 


X 
A 

"7\ 
A 

YK 

t6W- 

AS 

? ( 
i'hn 


rvn 

e 

it 
J* 
A 
1 


in 
ttV. 

ft 


Q 

A 
A 

r 

K 

I* 

[< 


ft 
Y 

rs 

V 

O 
A 

A+tt 
AS 


s 

A 
1 

lh 


_A 

A 
A 
V 
A 
A 
V 


■X 

A 
V 
A 

X 

O 
A 


!L 

A 
'A 
I 

A 
A 
V 


A 
A 

□ 


A 
i 

A 

□ 

A 


A 
1 

T 
□ 

A 
A 


r^ 

A 
1 


1 

*A 
1 


A 

1 
1 

1 

*A 
1 


1 

*A 
1 

A 


jL 

o 
l\ 

V 

A 


* 
■+- 

lino 

T 
□ 

A 

n 


<o 

W\ 


A 
A 
~>i 

A 
1 

K 



-99- 



[03 1] 



in 

O 

ri 
O 

j- 

± 

n 



MS 



K3 

J? 
rj 

S 

"3? 
\2 



Ho 



S 



eg 



\ 



CO 



CM 



CM 

h-' 



CO 

cvi 



o 

r*- 
=1 



o 
-Cr" 



CO 



=1 



eg 



CO 



.1 



eg 
CJ 

£ 



CO 



CO 



Una ^ {V- 



I 

I'h 



IS 




e 


fa 


& 






r J 




i 1 - 


iy 






^ : 




S 




#S 




mis 









-BHD 

Q 



m 



9)V 



TOT 

nCT 



ruA 1 



H 

O 
A 



■B-- 



Us 



ft lis 

i < 



i 

m 

r<; 
<□ 



n 



in 



■< 

it 



V 

n 

ma 



P- 



V 

n 
T 

ts 

n 



v 

Bi- 



ces 



i ,n 
■wv 



I 

K 



tt5 



I 
I 

ft 



CM 
i 

ca 

CO 

d 

UL 



-100- 



m 

P 



7S 

n 



m 



u 
it* 



■R 



CO 

o 
o 

0) 

o 



ai 



in 



«1 

or-. 



rj 

Wife 

m -=-• 



ai 



K3 

w 

□g 
e 

m 

ccx> 

K- 



10 
ai 



aw 



11 
I 

CD 



LO 

cri 



03 



K3 

fa 



-(=3 cm 
>- HP 
( — * nr 



HE 



K3 

A] 



tm 



-101- 



in 












i7> 




i — 








IT* 
P 


CO 


CO 


CO 


co 


CM 
OO 




fa 

M 










j_ 
n 


n 
G 
*S 

3> 

m 

V 










W 


m 

st 
m 


m 
is 


s 


I 


id 


u 


u 

J. 




R 


R 


M 

& 
m 

ecu 

or 


§ 
e 

(Dtp 

En 

— % r<3 


□ 

h 

1 CEi 
1 4fH- 

□ ijE 


□ 

"14 

1 

rnce! 
L-Jhw- 


in 

ft 

r J 
£> 


KB 
(m i 

-t*r- 1 

rS n 
□ ■h 



-102- 



INTERNATIONAL SEARCH REPORT 



Inter -rial Application No 

PCT/U5 98/12017 



A. CLASSIFICATION OF SUBJECT MATTER 

IPC 6 S06F9/44 G06F1/Q0 



According to trie mational Patent Classification (IPC) nr to i»r. natoial classitcaron *nd IPC 



B. FIELDS SEARCHED 



Minimum documentation scarchco (cta5siica:ian syslom followed by z ossification symtiulsi 

IPC 6 S06F 



CocumentatKjn searched other than minimLimdoaimentation lo tho extent thai such documents are included in the flBlds searr-tieU 



Bectronic data base consulted during me international searcn Iname ol data base and. whore practical, search term uaud> 



C. DOCUMENTS CONSIDERED TO BE RELEVANT 



Category J Citation of oocurnent.witn indication, wnere appropriate, of the relevant passage 



WO 97 04394 A (DRAKE CHRISTOPHER NATHAN) 
6 February 1997 

see page 3, line 25 - page 4, line 10 
see page 5, line 25 - page 6, line 8 

COHEN F B: "OPERATING SYSTEM PROTECTION 
THROUGH PROGRAM EVOLUTION" 
COMPUTERS & SECURITY INTERNATIONAL JOURNAL 
DEVOTED TO THE STUDY OF TECHNICAL AND 
FINANCIAL ASPECTS OF COMPUTER SECURITY, 
vol. 12, no. 6, 1 October 1993. pages 
565-534, XP000415701 
see the whole ducument 

WO 97 33216 A (NORTHERN TELECOM LTD) 
12 September 1997 

see page 8, line 13 - page 9, line 33 



Relevant lo claim No. 



1-20 



1-20 



1-20 



□ ^ 



finer documents are listed in (he continuation of box C . 



ID 



Patent family m*«ri bers are listed in anna* 



' Special categories of cited documents 

"A' dbeument defining ttie genar^i &in.\^ of &r\ vurijr h is not 

considered to be of particular relevance 
"E" easier aocument but pubfished on or after the international 
Filing date 

"L" document which may Ihrow double on priority claim(s) or 

which is ci:ed Id es-abheh His ptihlic^iinnrtate of another 

cilalion or other special reason (as specified) 

"O" document refHrnng to an oral disclosure, u&s, exhibition or 
other means 

"P" dbcument pubLGficd prior to ths international King date but 
later tnan the priority dale claimed 



" i ' later document punished afier the iniernaitaral tiling date 

or priority cfelt 5 and m>t in ooniiict with the appication Out 
died 10 undersla nc the principle or (heory underiying the 
inwanlion 

'X ' document of particular retevancs; ths darned invention 
cannot be cones-dared rto^el or cannot be considered to 
in *cs lye an inveit va step when the document is taken alone 

"V" document Dt particular relevance; the claimed invention 

cannot be conMrien^rj to inirrjlv? hm inventive HtR|> vvh«n lh*i 
docuneni is combined with onB dt mors other such docu- 
ments, such combination osing ob^ous to a person skilled 
in (heart. 

*6* otocumant number ol the &pme patent lamiiy 



Date of the actual completion ol theinternarionai search 



15 September 1998 



Dais ot mailing of the intemaiionai search report 



22/09/1998 



Name and mailing address c-f the l£A 

European Patent OflicE, P. 3. 56 3 Ps:enllaan 2 

NL ■ 2280 HV nijswijk 

Tel. (+3i- , ra)3<IO-2a4C r Tx .ai flsi epo ni, 
Fax: 1+51-701 340-3016 



Authorized officer 



Brandt, J 



Form PCTJSA.210 (aecoidshaar.) (July i&£2| 



-103- 



INTERNATIONAL SEARCH REPORT 

Information an patent family members 


Inter -rial Application No 

PCT/US 98/12017 


Patent document 
cited in search report 


Pub!i cation 

date 


Patent tamty 


Publication 

date 



WO 9704394 A 06-02-1997 AU 5945795 A 23-01-1997 



W0 9733216 A 12-09-1997 US 5748741 A 05-05-1998 



Fprrn PCPlSAttlD ipalentlBinily A B nat> (July 



-104- 



7oy h^-i/roi^ 

(81) ffi SH E P (AT, BE, CH, CY, 

DE, DK, ES, FI, FR, GB, GR, IE, I 
T, LU, MC, NL, PT, SE), O A(B F, BJ 
, CF, CG, CI, CM, GA, GN, ML, MR, 
NE, SN, TD, TG), A P (GH, GM, KE, L 
S, MW, SD, SZ, UG, ZW), E A (AM, AZ 
, BY, KG, KZ, MD, RU, TJ, TM), AL 
, AM, AT, AU, AZ, BA, BB, BG, BR, 
BY, CA, CH, CN, CU, CZ, DE, DK, E 
E, ES, FI, GB, GE, GH, GM, GW, HU 
, ID, I L, IS, J P, KE, KG, KP, KR, 
KZ, LC, LK, LR, LS, LT, LU, LV, M 
D, MG, MK, MN, MW, MX, NO, NZ, PL 
, PT, RO, RU, SD, SE, SG, SI, S K, 
SL, TJ, TM, TR, TT, UA, UG, US, U 
Z, VN, YU, ZW 

3/61 

~3-—i?—yy KB, 3r-?yyY 3, 

ai^y^, TA^7— n-K 56 



-105- 



